diff --git a/docs/docs/user-guide/yaml-config.md b/docs/docs/user-guide/yaml-config.md
index 3d7fb1a1..96ffe7e2 100644
--- a/docs/docs/user-guide/yaml-config.md
+++ b/docs/docs/user-guide/yaml-config.md
@@ -49,7 +49,10 @@ seeds:
 
 ## HTTP Auth
 
-Browsertrix Crawler supports HTTP Basic Auth, which can be provide on a per-seed basis as part of the URL, for example:
+!!! warning "HTTP basic auth credentials are written to the archive"
+    We recommend exercising caution and only archiving with dedicated archival accounts, changing your password or deleting the account when finished.
+
+Browsertrix Crawler supports [HTTP Basic Auth](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication), which can be provide on a per-seed basis as part of the URL, for example:
 `--url https://username:password@example.com/`.
 
 Alternatively, credentials can be added to the `auth` field for each seed: