diff --git a/README.md b/README.md
index e68ae81..ec66d5e 100644
--- a/README.md
+++ b/README.md
@@ -2,8 +2,18 @@
 
 With MISPBump it is easy to share events on your MISP instance with other instances. Instead of generating organisations, sync-users and sync-servers you scan only two QR-Codes and the job is done.
 
+# Security
+
+A key agreement is realized with Diffie Hellman (Elliptic Curve 256 Bit), sensible data is encrypted with AES.  
+
+(how are credentials stored in app, keystore?)
+
+
+
 # How does it work?
 
+1. Main screen (no changes)
+
 1. Gather your organisation information from your MISP instance
 ![Gather Information](./Screenshots/sync-profile.png)
 
@@ -21,7 +31,3 @@ With MISPBump it is easy to share events on your MISP instance with other instan
 
 5. That's it! You are ready to share events across your instances
 ![Main Screen](./Screenshots/main.png)
-
-# Security
-
-A keyagreement is realized with Diffie Hellman (Elliptic Curve 256 Bit), and the data sent afterwards is encrypted with AES.