diff --git a/source/_integrations/webmin.markdown b/source/_integrations/webmin.markdown
index 46fc3c8ed7b..4a0e32ca59f 100644
--- a/source/_integrations/webmin.markdown
+++ b/source/_integrations/webmin.markdown
@@ -19,6 +19,14 @@ ha_platforms:
 
 This {% term integration %} provides sensors for monitoring the CPU and memory usage of your server.
 
+## Prerequisites
+
+For best security, create a specific Webmin user for Home Assistant with a strong password and only "Can accept RPC calls" permission (under "Permissions for all modules") and remove the "Can accept RPC calls" permission for all other users.
+
+{% note %}
+Be aware that the Webmin API ignores any 2FA set up via the frontend, e.g. it is even with enabled 2FA possible to use the API with only username and password.
+{% endnote %}
+
 {% include integrations/config_flow.md %}
 
 ## Sensors