diff --git a/README.md b/README.md
index 7c475fc..9a0eb82 100644
--- a/README.md
+++ b/README.md
@@ -149,6 +149,8 @@ To authorize by email domain use `--email-domain=yourcompany.com`. To authorize
 
 `oauth2_proxy` can be configured via [config file](#config-file), [command line options](#command-line-options) or [environment variables](#environment-variables).
 
+To generate a strong cookie secret use `python -c 'import os,base64; print base64.b64encode(os.urandom(16))'`
+
 ### Config File
 
 An example [oauth2_proxy.cfg](contrib/oauth2_proxy.cfg.example) config file is in the contrib directory. It can be used by specifying `-config=/etc/oauth2_proxy.cfg`