diff --git a/source/_components/media_player.mpchc.markdown b/source/_components/media_player.mpchc.markdown
index 6e06b454d14..76c7e443954 100644
--- a/source/_components/media_player.mpchc.markdown
+++ b/source/_components/media_player.mpchc.markdown
@@ -22,6 +22,12 @@ For this component to function, you will need to enable the Web Interface in the
   <img src='{{site_root}}/images/screenshots/mpc-hc.png' />
 </p>
 
+If the server running Home Assistant is not the same device that is running MPC-HC, you will need to ensure that the *allow access from localhost only* option is not set.
+
+<p class='note warning'>
+The MPC-HC web interface is highly insecure, and allows remote clients full player control file-system access without authentication. Never allow access to the Web UI from outside of your trusted network, and if possible [use a proxy script to restrict control or redact sensitive information](https://github.com/abcminiuser/mpc-hc-webui-proxy).
+</p>
+
 To add MPC-HC to your installation, add the following to your `configuration.yaml` file:
 
 ```yaml