diff --git a/cmd/ipfs/init.go b/cmd/ipfs/init.go
index a94c36a4d..8a120080d 100644
--- a/cmd/ipfs/init.go
+++ b/cmd/ipfs/init.go
@@ -83,7 +83,8 @@ func initCmd(c *commander.Command, inp []string) error {
 		return err
 	}
 
-	// pretend to encrypt key, then store it unencrypted
+	// currently storing key unencrypted. in the future we need to encrypt it.
+	// TODO(security)
 	skbytes, err := sk.Bytes()
 	if err != nil {
 		return err
diff --git a/config/config.go b/config/config.go
index 69b0a5a3b..54d461b19 100644
--- a/config/config.go
+++ b/config/config.go
@@ -52,7 +52,8 @@ func (i *Identity) DecodePrivateKey(passphrase string) (crypto.PrivateKey, error
 		return nil, err
 	}
 
-	//pretend to actually decrypt private key
+	// currently storing key unencrypted. in the future we need to encrypt it.
+	// TODO(security)
 	return x509.ParsePKCS1PrivateKey(pkb)
 }