diff --git a/HTTP_Headers.md b/HTTP_Headers.md
index 7bf6ec1..c56e023 100644
--- a/HTTP_Headers.md
+++ b/HTTP_Headers.md
@@ -20,6 +20,10 @@ If you don't know why you need these, leave them empty and ignore.
 
 Make the key strong enough!
 
+### Cloudflare WAF IP Access example
+
+In order to safely allow API access, both a `cf-access-client-id` and `cf-access-client-secret` HTTP headers must be present. Essentially a username and password pair. Please note that the settings do not attempt to hide your password value with '*' characters, it should be private enough on your personal phone Connect IQ app.
+
 ## Support
 
 **None!**