diff --git a/.env.example b/.env.example
index d843ca2a..b9197415 100644
--- a/.env.example
+++ b/.env.example
@@ -22,7 +22,7 @@ BACKEND_DOMAIN_NAME=backend.example.com
 
 # Obtain the following 2 values on the Pi Developer Portal (open develop.pi in the Pi Browser).
 
-# Domain validation key:
+# Domain validation key:61ebd164b2b96d9e620a87c9b8ff8a99f088229e5ac3bffab0f36a1c7e996cef466ff06a9db710d03e6dd272ad9a80024f5a6811f5aba8af8613e94873db56e5
 DOMAIN_VALIDATION_KEY=todo_developer_portal
 # Pi Platform API Key:
 PI_API_KEY=todo_developer_portal
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..034e8480
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 5.1.x   | :white_check_mark: |
+| 5.0.x   | :x:                |
+| 4.0.x   | :white_check_mark: |
+| < 4.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Use this section to tell people how to report a vulnerability.
+
+Tell them where to go, how often they can expect to get an update on a
+reported vulnerability, what to expect if the vulnerability is accepted or
+declined, etc.