diff --git a/config.sample.yaml b/config.sample.yaml
index fb94f0e..5322828 100644
--- a/config.sample.yaml
+++ b/config.sample.yaml
@@ -118,7 +118,10 @@ download:
 crypto:
     # Path to the file containing the request secret.
     # The secret is used to derive the key pair for encrypting and decrypting
-    # POST request bodies. The secret itself must be exactly 32 bytes, then 
-    # base64-encoded.
+    # POST request bodies. The secret itself must be an x25519 private key,
+    # consisting of 32 random bytes, then base64-encoded.
+    # The secret can be generated with:
+    #
+    # openssl rand -base64 32 > ./path/to/request_secret
     # Required.
     request_secret_path: "./request_secret"