diff --git a/static/features.html b/static/features.html
index ea181abf..e70fd384 100644
--- a/static/features.html
+++ b/static/features.html
@@ -198,9 +198,10 @@
when sending mail including alert messages from the attestation service
SSHFP across all domains for pinning SSH keys
Static key pinning for our services in apps like Auditor
- No cookies or similar client-side state for anything other than login sessions,
- which are set up via SameSite=strict cookies and have server-side session tracking
- with the ability to log out of other sessions
+ No persistent cookies or similar client-side state for anything other than
+ login sessions, which are set up via SameSite=strict cookies and have
+ server-side session tracking with the ability to log out of other
+ sessions
scrypt-based password hashing (likely Argon2 when the available implementations
are more mature)