diff --git a/scripts/cloudron-setup b/scripts/cloudron-setup
index dc6b386e3..038a10b7e 100755
--- a/scripts/cloudron-setup
+++ b/scripts/cloudron-setup
@@ -60,7 +60,7 @@ apiServerOrigin="https://api.cloudron.io"
 webServerOrigin="https://cloudron.io"
 sourceTarballUrl=""
 rebootServer="true"
-setupToken=""
+setupToken="" # this is a OTP for securing an installation (https://forum.cloudron.io/topic/6389/add-password-for-initial-configuration)
 redo="false"
 
 args=$(getopt -o "" -l "help,skip-baseimage-init,provider:,version:,env:,skip-reboot,generate-setup-token,redo" -n "$0" -- "$@")