diff --git a/frost-client/src/args.rs b/frost-client/src/args.rs
index c52ad9d..05a184c 100644
--- a/frost-client/src/args.rs
+++ b/frost-client/src/args.rs
@@ -9,8 +9,12 @@ pub(crate) struct Args {
 
 #[derive(Subcommand, Clone)]
 pub(crate) enum Command {
-    /// Initializes the user, generating a communication key pair and saving
-    /// to the config file.
+    /// Initializes the user, generating a communication key pair and saving to
+    /// the config file.
+    ///
+    /// WARNING: the config file will contain your private FROST shares in
+    /// clear. Keep it safe and never share it with anyone. Future versions of
+    /// this tool might encrypt the config file.
     Init {
         /// The path to the config file to manage. If not specified, it uses
         /// $HOME/.local/frost/credentials.toml
diff --git a/frost-client/src/init.rs b/frost-client/src/init.rs
index 7f2d06a..2ea9fd1 100644
--- a/frost-client/src/init.rs
+++ b/frost-client/src/init.rs
@@ -29,7 +29,11 @@ pub(crate) async fn init(args: &Command) -> Result<(), Box<dyn Error>> {
         config.path().expect("should not be None").display()
     );
     config.write()?;
-    eprintln!("Done.");
+    eprintln!(
+        "Done.\nWARNING: the config file will contain your private FROST shares in clear. \
+    Keep it safe and never share it with anyone. Future versions of this tool might encrypt \
+    the config file."
+    );
 
     Ok(())
 }