diff --git a/static/usage.html b/static/usage.html
index da0971c1..005b1bac 100644
--- a/static/usage.html
+++ b/static/usage.html
@@ -205,6 +205,26 @@
                 </section>
             </section>
 
+            <section id="usb-peripherals">
+                <h2><a href="#usb-peripherals">USB peripherals</a></h2>
+
+                <p>GrapheneOS defaults to ignoring connected USB peripherals when the device is
+                already booted and the screen is locked. A USB device already connected at boot
+                will still work. The purpose is reducing attack surface for a locked device with
+                active login sessions to user profiles to protect data that's not at rest. This
+                can be controlled in Settings ➔ Security ➔ USB accessories. The options are:</p>
+
+                <ul>
+                    <li>Disallow new USB peripherals</li>
+                    <li>Allow new USB peripherals when unlocked (default)</li>
+                    <li>Allow new USB peripherals (like stock Android)</li>
+                </ul>
+
+                <p>This option has no impact on the device acting as a USB peripheral itself when
+                connected to a computer. Android defaults to charge only mode and requires opt-in
+                opt-in to the device being used for file transfer, USB tethering, MIDI or PTP.</p>
+            </section>
+
             <section id="web-browsing">
                 <h2><a href="#web-browsing">Web browsing</a></h2>