diff --git a/.env.example b/.env.example
index 976bfd3..c79e887 100644
--- a/.env.example
+++ b/.env.example
@@ -7,11 +7,13 @@ ADDRESS=0.0.0.0
 GC_INTERVAL=10
 GC_ENABLED=true
 MULTIPART_RETENTION_HOURS=24
-AUTH_ENABLED=true
+AUTH_ENABLED=false
 AUTH_REGION=us-east-1
 AUTH_SKEW_SECONDS=300
 AUTH_MAX_PRESIGN_SECONDS=86400
-AUTH_MASTER_KEY=
+# When AUTH_ENABLED=true you MUST set AUTH_MASTER_KEY to a strong random value, e.g.:
+#   openssl rand -base64 32
+AUTH_MASTER_KEY=REPLACE_WITH_SECURE_RANDOM_KEY
 AUTH_BOOTSTRAP_ACCESS_KEY=
 AUTH_BOOTSTRAP_SECRET_KEY=
 AUTH_BOOTSTRAP_POLICY=