diff --git a/etc/default/grub.d/40_cold_boot_attack_defense.cfg b/etc/default/grub.d/40_cold_boot_attack_defense.cfg
index 9342c5a..a4a04eb 100644
--- a/etc/default/grub.d/40_cold_boot_attack_defense.cfg
+++ b/etc/default/grub.d/40_cold_boot_attack_defense.cfg
@@ -1,6 +1,8 @@
 ## Copyright (C) 2022 - 2022 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
 ## See the file COPYING for copying conditions.
 
+## Wiping RAM at shutdown to defeat cold boot attacks.
+##
 ## RAM wipe is enabled by default on host operating systems, real hardware.
 ## RAM wipe is disabled by in virtual machines (VMs).
 ##