diff --git a/config/filter.d/sshd.conf b/config/filter.d/sshd.conf
index 8d39f412..92b6ed19 100644
--- a/config/filter.d/sshd.conf
+++ b/config/filter.d/sshd.conf
@@ -1,5 +1,8 @@
 # Fail2Ban filter for openssh
 #
+# If you want to protect OpenSSH from being bruteforced by password
+# authentication then get public key authentication working before disabling
+# PasswordAuthentication in sshd.conf.
 
 [INCLUDES]