diff --git a/tagreader.yaml b/tagreader.yaml
index 7884e30..5fb5eee 100644
--- a/tagreader.yaml
+++ b/tagreader.yaml
@@ -1,10 +1,19 @@
+# The following secrets should be defined in the secrets.yaml (check top right of ESP home in HomeAssistant)
+# wifi_ssid: "Your WIFI Name"
+# wifi_password: "Your WIFI password"
+# defaultfallbackpw: "Default fallback password for hotspot"
+# encryptionkey: "Your encryption key"
+# otapassword: "Your ota password"
+
+
 # Insert your SSID and Your PWD after inital setup
 wifi:
-# networks:
-#    - ssid: 'REPLACEME'          # Enter your WiFi SSID here. Example: `ssid: 'your_network_name'`
-#      password: 'REPLACEME'      # Enter your wifi password here. Example: `password: 'abcde123456'`
+  networks:
+    ssid: !secret wifi_ssid
+    password: !secret wifi_password
   ap:
-    ssid: ${name}
+    ssid: "NfcReader Fallback Hotspot"
+    password: !secret defaultfallbackpw
 
 # Enable the captive portal for inital WiFi setup
 captive_portal:
@@ -219,9 +228,13 @@ api:
         id: activity_led
     - rtttl.play: "write:d=24,o=5,b=100:b,b"
 
+  encryption:
+    key: !secret encryptionkey
+
 # Enable OTA upgrade
 ota:
   - platform: esphome
+    password: !secret otapassword
 
 i2c:
   scan: False