Add a note that /slack register stores the token in plain text

1 files changed, 8 insertions, 0 deletions

diff --git a/README.md b/README.md
index 65e4acd..4550c5c 100644
--- a/README.md
+++ b/README.md
@@ -171,6 +171,10 @@ run in WeeChat. The command is of the form:
 /slack register <code>
 ```
 
+Note that this will store your token in plain text in the
+`plugins.var.python.slack.slack_api_token` option. See "Optional: Secure the
+tokens" below for how to secure it.
+
 Your Slack team is now added, and you can complete the setup by reloading the
 wee-slack script.
 
@@ -194,6 +198,10 @@ token (but not the token itself). If you're worried about this, you can use the
 8. Return to WeeChat and run `/slack register <token>:<cookie>`.
 9. Reload the script with `/python reload slack`.
 
+Note that this will store your token in plain text in the
+`plugins.var.python.slack.slack_api_token` option. See "Optional: Secure the
+tokens" below for how to secure it.
+
 Note that if you log in or out of any teams in your browser, the cookie will be
 invalidated, and you will have to update it.