diff --git a/docs/simplesamlphp-changelog.md b/docs/simplesamlphp-changelog.md
index 4d75fa020e33aa6281c705239ac52e8f5fa06f5c..000dd40397dc1c61f464e0fe03a6abe33b16795f 100644
--- a/docs/simplesamlphp-changelog.md
+++ b/docs/simplesamlphp-changelog.md
@@ -21,6 +21,7 @@ Released TBD
   * Update configuration templates and documentation to PHP
     short array syntax.
   * All clases moved to namespaces and reformatted code to PSR-2.
+  * Use bcrypt for new password hashes, old ones will remain working.
   * Many code cleanups.
 
 ### consent
@@ -30,6 +31,11 @@ Released TBD
   * Allow `core:PHP` to manipulate all of the state.
   * IdP initiated login: add compatibility with Shibboleth parameters.
 
+### preprodwarning
+  * This module is now deprecated. Use the `production` configuration
+    option instead; set it to `false` to show a pre-production warning
+    before authentication.
+
 ### saml
   * Add initial support for SAML Subject Id Attributes.
   * Allow to specify multiple supported NameIdFormats in IdP hosted and