diff --git a/README.md b/README.md
index d408656..32ad295 100644
--- a/README.md
+++ b/README.md
@@ -3,13 +3,13 @@
 - Create vault with: `ansible-vault create secrets.yml`
 - Create entry in vault with: `ansible-vault edit secrets.yml`
 - Add following entries: 
-  - `vault_pi_tudattr_password: <YOURPASSWORD>`
-  - `vault_aya01_tudattr_password: <YOURPASSWORD>`
-  - `vault_pihole_password: <YOURPASSWORD>`
-  - `vault_mysql_root_password: <YOURPASSWORD>`
-  - `vault_mysql_user_password: <YOURPASSWORD>`
-  - `vault_ddns_tudattrdev_password: <YOURPASSWORD>`
-  - `vault_ddns_borgland_password: <YOURPASSWORD>`
+  - `vault_pi_tudattr_password: <YOURPASSWORD>` (password you've setup on the device)
+  - `vault_aya01_tudattr_password: <YOURPASSWORD>` (password you've setup on the device)
+  - `vault_pihole_password: <YOURPASSWORD>` (arbitrary password you want to log in with)
+  - `vault_mysql_root_password: <YOURPASSWORD>` (arbitrary password, used internally)
+  - `vault_mysql_user_password: <YOURPASSWORD>` (arbitrary password, used internally)
+  - `vault_ddns_tudattrdev_password: <YOURPASSWORD>` (password needed for ddns, refer to [here](https://www.namecheap.com/support/knowledgebase/article.aspx/595/11/how-do-i-enable-dynamic-dns-for-a-domain/))
+  - `vault_ddns_borgland_password: <YOURPASSWORD>` (password needed for ddns, refer to [here](https://www.namecheap.com/support/knowledgebase/article.aspx/595/11/how-do-i-enable-dynamic-dns-for-a-domain/))
 
 ## Server
 - Install Debian (debian-11.5.0-amd64-netinst.iso) on remote system