clarify recommendation

1 files changed, 7 insertions, 9 deletions

diff --git a/static/faq.html b/static/faq.html
index 2f669979..6d1c3fa4 100644
--- a/static/faq.html
+++ b/static/faq.html
@@ -396,15 +396,13 @@
                     owner profile without rebooting due to it encrypting the sensitive system-wide
                     operating system data.</p>
 
-                    <p>Our recommendation for a high security setup is to use the owner profile
-                    only for managing other profiles. Using a secondary profile for regular usage
-                    allows you to make use of the device without decrypting the data in your
-                    regular usage profile. It also allows putting it at rest without rebooting the
-                    device. Even if you use the same passphrase for multiple profiles, each of
-                    those profiles still ends up with a unique key encryption key and a compromise
-                    of the OS while one of them is active won't leak the passphrase. The advantage
-                    to using separate passphrases is in case an attacker records you entering
-                    it.</p>
+                    <p>Using a secondary profile for regular usage allows you to make use of the
+                    device without decrypting the data in your regular usage profile. It also
+                    allows putting it at rest without rebooting the device. Even if you use the
+                    same passphrase for multiple profiles, each of those profiles still ends up
+                    with a unique key encryption key and a compromise of the OS while one of them
+                    is active won't leak the passphrase. The advantage to using separate
+                    passphrases is in case an attacker records you entering it.</p>
 
                     <p>File data is encrypted with AES-256-XTS and file names with AES-256-CTS. A
                     unique key is derived using HKDF-SHA512 for each regular file, directory and