diff --git a/CLAUDE.md b/CLAUDE.md
index bad2d032..88db450b 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -293,7 +293,7 @@ Run via `docker-compose.observability.yml` — requires the main stack to be run
 | `PORT_GRAFANA` | Host port for Grafana UI (default: `3003`) |
 | `PORT_GLITCHTIP` | Host port for GlitchTip UI (default: `3002`) |
 | `PORT_PROMETHEUS` | Host port for Prometheus UI (default: `9090`) |
-| `GRAFANA_ADMIN_PASSWORD` | Grafana `admin` login password |
+| `GRAFANA_ADMIN_PASSWORD` | Grafana `admin` login password — generate with `openssl rand -hex 32` |
 | `GLITCHTIP_SECRET_KEY` | Django secret key for GlitchTip — generate with `python3 -c "import secrets; print(secrets.token_hex(32))"` |
 | `GLITCHTIP_DOMAIN` | Public-facing base URL for GlitchTip (email links, CORS), e.g. `https://glitchtip.example.com` |
 | `SENTRY_DSN` | GlitchTip/Sentry DSN for the backend (Spring Boot) — leave empty to disable |