diff --git a/CHANGELOG.md b/CHANGELOG.md
index 00f2b45fe..3229d4751 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,7 @@ and adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 - Webhooks types are now exported outside the library [#91](https://github.com/shopify/shopify-node-api/pull/91)
 - Added support for private apps [#99](https://github.com/Shopify/shopify-node-api/pull/99)
 - `USER_AGENT_PREFIX` added to Context, to add agent to all requests [#101](https://github.com/Shopify/shopify-node-api/pull/101)
+- Add link to tutorial on how to rotate credentials if neccesary [#107](https://github.com/Shopify/shopify-node-api/pull/107)
 
 ### Fixed
 
diff --git a/docs/getting_started.md b/docs/getting_started.md
index 728809a10..6497566f1 100644
--- a/docs/getting_started.md
+++ b/docs/getting_started.md
@@ -45,13 +45,16 @@ src/
   index.ts
 ```
 
-If your application is in a Git repository, you should make sure to add these files to `.gitignore`:
+If your application is in a Git repository, you should **make sure to add these files to `.gitignore`**.
+
 ```
 .env
 dist
 node_modules
 ```
 
+ **Important:** If you ever accidentally commit your API secret to GitHub or any other third party, you can follow [this tutorial](https://shopify.dev/tutorials/rotate-revoke-api-credentials) on how to generate new credentials for your application.
+
 `tsconfig.json`
 ```json
 {