diff --git a/lib/utils.js b/lib/utils.js
index 32b8863760..0ff935f1e3 100644
--- a/lib/utils.js
+++ b/lib/utils.js
@@ -38,8 +38,12 @@ exports.addNunjucksFilters = function (env) {
 exports.basicAuth = function (username, password) {
   return function (req, res, next) {
     if (!username || !password) {
+      var docsUrl = 'https://govuk-prototype-kit.herokuapp.com/docs/publishing-on-heroku#6-set-a-username-and-password'
       console.log('Username or password is not set.')
-      return res.send('<h1>Error:</h1><p>Username or password not set. <a href="https://govuk-prototype-kit.herokuapp.com/docs/publishing-on-heroku#5-set-a-username-and-password">See guidance for setting these</a>.</p>')
+      return res.send('<h1>Error: username or password not set.</h1>' +
+                      '<p>All prototypes should be protected from accidental discovery by the public when published online.</p>' +
+                      '<p>You need to set a username and password to make prototypes visible online.</p>' +
+                      '<p><a href="' + docsUrl + '">See guidance for doing this</a>.</p>')
     }
 
     var user = basicAuth(req)