diff --git a/docs/settings.rst b/docs/settings.rst
index 532f52cf..9adbe76b 100644
--- a/docs/settings.rst
+++ b/docs/settings.rst
@@ -95,6 +95,13 @@ As a secure default, Mopidy only accepts connections from ``localhost``. If you
 want to open it for connections from other machines on your network, see
 the documentation for :attr:`mopidy.settings.MPD_SERVER_HOSTNAME`.
 
+If you open up Mopidy for your local network, you should consider turning on
+MPD password authentication by setting
+:attr:`mopidy.settings.MPD_SERVER_PASSWORD` to the password you want to use.
+If the password is set, Mopidy will require MPD clients to provide the password
+before they can do anything else. Mopidy only supports a single password, and
+do not support different permission schemes like the original MPD server.
+
 
 Scrobbling tracks to Last.fm
 ============================