diff --git a/README.md b/README.md
index 5274d4ff..16d2219c 100644
--- a/README.md
+++ b/README.md
@@ -270,8 +270,8 @@ Basic requirements:
 - Website supports HTTPS and 301 redirects HTTP requests
 - SSL certificate passes [Qualys SSL Labs SSL test](https://www.ssllabs.com/ssltest/)
 - The identity of CEOs and/or developers is public
-- If private keys are stored online:
-  - Refuses weak passwords (short passwords and/or common passwords)
+- If private keys or encryption keys are stored online:
+  - Refuses weak passwords (short passwords and/or common passwords) used to secure access to any funds, or provides an aggressive account lock-out feature in response to failed login attempts along with a strict account recovery process.
 - If user has no access over its private keys:
   - Provides 2FA authentication feature
   - Reminds the user to enable 2FA by email or in the main UI of the wallet