diff --git a/docs/faq.rst b/docs/faq.rst
index fbf213768..a09093775 100644
--- a/docs/faq.rst
+++ b/docs/faq.rst
@@ -132,6 +132,7 @@ key file based encryption with a blank passphrase. See
 .. _password_env:
 .. note:: Be careful how you set the environment; using the ``env``
           command, a ``system()`` call or using inline shell scripts
+          (e.g. ``BORG_PASSPHRASE=hunter12 borg ...``)
           might expose the credentials in the process list directly
           and they will be readable to all users on a system. Using
           ``export`` in a shell script file should be safe, however, as