diff --git a/docs/FAQ.md b/docs/FAQ.md
index a1170ea3..785ae3b7 100644
--- a/docs/FAQ.md
+++ b/docs/FAQ.md
@@ -33,6 +33,7 @@
 - [How do I access my Documents/Downloads/Desktop folders in code-server on OSX?](#how-do-i-access-my-documentsdownloadsdesktop-folders-in-code-server-on-osx)
 - [Differences compared to Theia?](#differences-compared-to-theia)
 - [`$HTTP_PROXY`, `$HTTPS_PROXY`, `$NO_PROXY`](#http_proxy-https_proxy-no_proxy)
+- [Does code-server have any security login validation?](#does-code-server-have-any-security-login-validation)
 - [Enterprise](#enterprise)
 
 <!-- END doctoc generated TOC please keep comment here to allow auto update -->
@@ -458,6 +459,10 @@ requests made from extensions etc. To proxy requests from your browser you need
 configure your browser separately. Browser requests would cover exploring the extension
 marketplace.
 
+## Does code-server have any security login validation?
+
+code-server only supports a single password and limits logins to two per minute plus twelve per hour.
+
 ## Enterprise
 
 Visit [our enterprise page](https://coder.com) for more information about our