diff --git a/PREINSTALL-README.md b/PREINSTALL-README.md
new file mode 100644
index 0000000..10043ae
--- /dev/null
+++ b/PREINSTALL-README.md
@@ -0,0 +1,12 @@
+# secureblue
+
+The recommended method to install secureblue is to rebase from an upstream silverblue/kinoite installation. Before rebasing and during the installation, the following checks are recommended.
+
+## Preinstall guide
+
+- During the installation, select the option to encrypt the drive you're installing to.
+- Use a strong password when prompted.
+- Leave the root account disabled.
+- Ensure secureboot is enabled in your bios.
+- Ensure your bios is up to date by checking its manufacturer's website.
+- Set a bios password to prevent tampering
\ No newline at end of file
diff --git a/README.md b/README.md
index e963591..1368518 100644
--- a/README.md
+++ b/README.md
@@ -52,6 +52,7 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
 > **Warning**
 > [This is an experimental feature](https://www.fedoraproject.org/wiki/Changes/OstreeNativeContainerStable) and should not be used in production, try it in a VM for a while!
 
+Have a look at [PREINSTALL-README](PREINSTALL-README.md) before proceeding.
 
 ### Available Images