diff --git a/README.md b/README.md
index 22ecc1a..89726e4 100644
--- a/README.md
+++ b/README.md
@@ -10,6 +10,8 @@ Simple, easy to use server-side two-factor authentication library for .NET that
 
 *Additional examples at [Google.Authenticator.WinTest](https://github.com/BrandonPotter/GoogleAuthenticator/tree/master/Google.Authenticator.WinTest) and [Google.Authenticator.WebSample](https://github.com/BrandonPotter/GoogleAuthenticator/tree/master/Google.Authenticator.WebSample)*
 
+`key` should be stored by your application for future authentication and shouldn't be regenerated for each request. The process of storing the private key is outside the scope of this library and is the responsibility of the application.
+
 ```csharp
 using Google.Authenticator;