diff --git a/static/faq.html b/static/faq.html
index c43eb397..af449cb3 100644
--- a/static/faq.html
+++ b/static/faq.html
@@ -1374,7 +1374,8 @@
                     implementations. The only apps we can recommend is the official WireGuard
                     app and the official Mullvad app. Mullvad's app is tested on GrapheneOS with
                     hardware memory tagging, unlike the official WireGuard app which has invalid
-                    memory accesses detected by memory tagging if it's enabled.</p>
+                    memory accesses detected by memory tagging if it's enabled. We recommend using
+                    one of these VPN apps instead of the built-in IPSec VPN support.</p>
 
                     <p>VPN configurations created with the built-in support can be set as the
                     always-on VPN in the configuration panel. This will keep the VPN running,