diff --git a/src/lib.rs b/src/lib.rs
index 3ed8044..9703eec 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -11,11 +11,12 @@
 //!
 //! ## Quick Start
 //!
-//! ```rust
+//! ```rust,no_run
 //! use atauth::{TokenVerifier, TokenPayload};
 //!
-//! // Create a verifier with your HMAC secret
-//! let verifier = TokenVerifier::new(b"your-secret-key");
+//! // Create a verifier with your HMAC secret (must be at least 32 bytes)
+//! let verifier = TokenVerifier::new(b"your-secret-key-at-least-32-bytes!!")
+//!     .expect("Secret must be at least 32 bytes");
 //!
 //! // Verify a token from the auth gateway
 //! match verifier.verify("token-from-gateway") {
diff --git a/src/token.rs b/src/token.rs
index 196cf14..367cb4a 100644
--- a/src/token.rs
+++ b/src/token.rs
@@ -75,10 +75,11 @@ impl TokenPayload {
 ///
 /// # Example
 ///
-/// ```rust
+/// ```rust,no_run
 /// use atauth::TokenVerifier;
 ///
-/// let verifier = TokenVerifier::new(b"your-shared-secret");
+/// let verifier = TokenVerifier::new(b"your-secret-key-at-least-32-bytes!!")
+///     .expect("Secret must be at least 32 bytes");
 ///
 /// match verifier.verify("payload.signature") {
 ///     Ok(payload) => println!("Valid token for: {}", payload.handle),