diff --git a/app/src/main/res/values/config.xml b/app/src/main/res/values/config.xml
index 689fe0303..5d5b3d45c 100644
--- a/app/src/main/res/values/config.xml
+++ b/app/src/main/res/values/config.xml
@@ -21,6 +21,10 @@
 
     <!--
     Your Twitter Consumer Secret
+
+    WARNING: By obtaining your Consumer Key and Consumer Secret other programs can perform API
+    operations as your app. Embedding the Consumer Key and Consumer Secret in your app, no matter
+    how obfuscated, makes it vulnerable to being stolen.
     -->
     <string name="twitter_consumer_secret" translatable="false">CHANGE-ME</string>
 </resources>