diff --git a/readme.md b/readme.md
index bdba3a3..04a5107 100644
--- a/readme.md
+++ b/readme.md
@@ -169,6 +169,14 @@ User: admin, password can be retrieved with (ignore the '%' at the end):
 kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d
 ```
 
+### Ceph default login
+
+User: admin on [http://ceph.noxxos.nl](http://ceph.noxxos.nl)
+
+```bash
+kubectl -n ceph get secret rook-ceph-dashboard-password -o jsonpath="{['data']['password']}" | base64 --decode && echo
+```
+
 ### Certificate lifetimes
 
 Talos Linux automatically manages and rotates all server side certificates for etcd, Kubernetes, and the Talos API. Note however that the kubelet needs to be restarted at least once a year in order for the certificates to be rotated. Any upgrade/reboot of the node will suffice for this effect.