diff --git a/.env.template b/.env.template
index 3c177a26..13933a6b 100644
--- a/.env.template
+++ b/.env.template
@@ -390,6 +390,18 @@
 ## In any case, if a code has been used it can not be used again, also codes which predates it will be invalid.
 # AUTHENTICATOR_DISABLE_TIME_DRIFT=false
 
+## Client Settings
+## En- or disable experimental feature flags for clients.
+## This is a comma-separated list of flags, e.g. "flag1,flag2,^flag3".
+## To disable a feature prepend a caret (^) to the flag name.
+##
+## The following flags are available:
+## - "autofill-overlay": Add an overlay menu to form fields for quick access to credentials.
+## - "autofill-v2": Use the new autofill implementation.
+## - "browser-fileless-import": Directly import credentials from other providers without a file.
+## - "fido2-vault-credentials": Enable the use of FIDO2 security keys as second factor.
+## EXPERIMENTAL_CLIENT_FEATURE_FLAGS=^autofill-v2,fido2-vault-credentials
+
 ## Rocket specific settings
 ## See https://rocket.rs/v0.4/guide/configuration/ for more details.
 # ROCKET_ADDRESS=0.0.0.0