diff --git a/Setup.md b/Setup.md
index 1d766c0..051b9c0 100644
--- a/Setup.md
+++ b/Setup.md
@@ -12,6 +12,9 @@ Now, open the config at the path specified and get to configuring.
 * **ui**
   * The host and port are where the web interface will be hosted. The server runs insecurely, so you should put it behind a reverse proxy with HTTPS.
   * The username and password here are for the admin page.
+* **password validation**
+  * Enabling this will display a list of criteria when a user tries to create an account, and validate it against these when they try to submit.
+  * The rest of the settings are self explanatory.
 * **email**
   * Enabling this will store the emails that new users enter in the creation form and store them. When the user triggers a 'reset password' on the Jellyfin login page, the PIN required will be sent to the email address corresponding to the user. For pre-existing users, simply add them to the `emails.json` file.
   * `watch_directory` is the folder to watch for password reset files. To figure out where this should be, load up Jellyfin and press the 'Forgot password' button. Enter your username, and a popup will appear telling you the path of the created password reset file. Put that directory here.