diff --git a/CHANGELOG.md b/CHANGELOG.md
index b0ee7ddc..2d4ac704 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,13 @@ Releases
 This high level changelog is usually updated when a release is tagged.
 On the master branch there may be changes that are not (yet) described here.
 
+### 1.21
+
+* [~] fix "Peer refused to agree to his IP address" message, again
+* [~] deprecate option --plugin
+* [-] better masking of password in logs
+* [-] break on reading 0 from ppp pty, for non-Linux systems
+
 ### 1.20.5
 
 * [-] revert previous fix from 1.20.4, make it optional
@@ -36,7 +43,7 @@ On the master branch there may be changes that are not (yet) described here.
 ### 1.20.1
 
 * [-] fix version string in configure.ac
-
+password
 ### 1.20.0
 
 * [-] fix incorrect empty HDLC frame detection causing connection drops