diff --git a/README.md b/README.md
index 58938b8..2b99e1c 100644
--- a/README.md
+++ b/README.md
@@ -123,16 +123,13 @@ sudo pacman -S python-pyqt6
 # oathtool and wl-clipboard (wl-copy) — already needed by vpn-connect.sh
 sudo pacman -S oath-toolkit wl-clipboard
 
-# Optional but strongly recommended: encrypt stored profiles
+# Required: encrypt/decrypt stored profiles
 sudo pacman -S python-cryptography
-# or via pip inside a venv:
-pip install cryptography
 ```
 
-> **Without `cryptography`:** profiles are stored as plain base64-encoded JSON —
-> anyone with file access can read them. A warning banner is shown in the UI.
-> Install `python-cryptography` to get real Fernet/AES encryption with
-> PBKDF2-derived keys.
+> **`python-cryptography` is required.** Without it, profiles encrypted on
+> another machine cannot be decrypted. A warning banner is shown in the UI
+> when the package is missing.
 
 ### Usage