diff --git a/node-red/README.md b/node-red/README.md
index e3c0a30..d8724df 100644
--- a/node-red/README.md
+++ b/node-red/README.md
@@ -52,7 +52,10 @@ module.exports = {
             username: "admin",
             password: "$2a$08$zZWtXTja0fB1pzD4sHCMyOCMYz2Z6dNbM6tl8sJogENOMcxWV9DN.",
             permissions: "*"
-        }]
+        }],
+        default: {
+            permissions: "read"
+        }
     },
 
     //...
@@ -60,14 +63,14 @@ module.exports = {
 }
 ```
 
-> Password hash can be generated by:
->> `node -e "console.log(require('bcryptjs').hashSync('password', 8))"`
+> Password hash can be generated by running `node-red-admin hash-pw`.
 
 ## up and running
 
 ```
 $ cd ~/fig/node-red/
 $ docker-compose up -d
+$ docker-compose exec node-red node-red-admin hash-pw
 $ vi data/settings.js
 $ docker-compose exec node-red bash
 >>> cd /root/.node-red