diff --git a/README.md b/README.md
index 00aeb08..20f6af6 100644
--- a/README.md
+++ b/README.md
@@ -197,15 +197,17 @@ or is interrupted.
 ### Setting up an 'authtoken' for scripted (password-free) logins
 
 Use the -g option of xs to request a token from the remote server, which will return a
-hostname:token string. Place this string into $HOME/.xs_id to allow logins without
-entering a password (obviously, $HOME/.xs_id on both server and client for the user
+hostname:token string. Place this string into $HOME/.config/xs/.xs_id to allow logins without
+entering a password (obviously, $HOME/.config/xs/.xs_id on both server and client for the user
 should *not* be world-readable.)
 
 ```
-$ xs -g user@host.net >~/.xs_id
+$ xs -g user@host.net >>~/.config/xs/.xs_id
 ```
-[enter password blindly, authtoken entry will be stored in ~/.xs_id]
+[enter password blindly, authtoken entry will be stored in ~/.config/xs/.xs_id]
 
+NOTE you may need to remove older entries for the same host if this is not the first time you have added
+it to your .xs_id file.
 
 ### File Copying using xc