diff --git a/.gitsigners b/.gitsigners
new file mode 100644
index 0000000..393b13f
--- /dev/null
+++ b/.gitsigners
@@ -0,0 +1,2 @@
+aydin@mercan.dev sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIOx8Pohb/T+hyVvP3ZOwdaZaJLTL/gBcjVWstGvdDfQWAAAABHNzaDo=
+aydin@mercan.dev sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAILFS/0Skf2GdsnwDijFcflrurseip9zKwMuKM2PKWDFsAAAABHNzaDo=
diff --git a/README.md b/README.md
index d040cd6..e343c72 100644
--- a/README.md
+++ b/README.md
@@ -17,6 +17,16 @@ chibiauth run --database=/path/to/database/of/chibiauth.db --port 9909 --base-ur
 * ChibiAuth will bind to localhost, bring your own TLS terminator.
 * The database is just a SQLite file, feel free to use something like litestream.
 
+## Development
+
+We prefer commit signing via SSH. The allowed signers are listed in `.gitsigners`.
+To verify an entry such as following might be needed in `./.git/config`:
+
+```ini
+[gpg.ssh]
+    allowedSignersFile = .gitsigners
+```
+
 ## License
 
 This repository is licensed under the EUPL-1.2. An English copy of the license text is available under `LICENSE`.