From f0c0828cacef65442978b0873893750c13f7b322 Mon Sep 17 00:00:00 2001
From: Sid <27780930+autinerd@users.noreply.github.com>
Date: Fri, 5 Jul 2024 09:32:49 +0200
Subject: [PATCH] Add 2FA note to webmin documentation (#32539)

---
 source/_integrations/webmin.markdown | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/source/_integrations/webmin.markdown b/source/_integrations/webmin.markdown
index 46fc3c8ed7b..4a0e32ca59f 100644
--- a/source/_integrations/webmin.markdown
+++ b/source/_integrations/webmin.markdown
@@ -19,6 +19,14 @@ ha_platforms:
 
 This {% term integration %} provides sensors for monitoring the CPU and memory usage of your server.
 
+## Prerequisites
+
+For best security, create a specific Webmin user for Home Assistant with a strong password and only "Can accept RPC calls" permission (under "Permissions for all modules") and remove the "Can accept RPC calls" permission for all other users.
+
+{% note %}
+Be aware that the Webmin API ignores any 2FA set up via the frontend, e.g. it is even with enabled 2FA possible to use the API with only username and password.
+{% endnote %}
+
 {% include integrations/config_flow.md %}
 
 ## Sensors