diff --git a/static/faq.html b/static/faq.html
index be554ac8..b32414e7 100644
--- a/static/faq.html
+++ b/static/faq.html
@@ -382,6 +382,9 @@
                         <li>140 or more failed attempts: 86400 second delay (1 day)</li>
                     </ul>
 
+                    <p>Invalid input outside the minimum or maximum length limits won't trigger an
+                    attempt at authentication or key derivation.</p>
+
                     <p>GrapheneOS only officially supports devices with Weaver. The fallback
                     implementation for devices without it is out-of-scope for this FAQ.</p>