diff --git a/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs b/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs
index 0bdf1d89c2..e07446d49f 100644
--- a/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs
+++ b/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs
@@ -659,6 +659,7 @@ public abstract class BaseRequestValidator<T> where T : class
         var customResponse = new Dictionary<string, object>();
         if (!string.IsNullOrWhiteSpace(user.PrivateKey))
         {
+            // PrivateKey usage is now deprecated in favor of AccountKeys
             customResponse.Add("PrivateKey", user.PrivateKey);
             var accountKeys = await _accountKeysQuery.Run(user);
             customResponse.Add("AccountKeys", new PrivateKeysResponseModel(accountKeys));
@@ -666,6 +667,7 @@ public abstract class BaseRequestValidator<T> where T : class
 
         if (!string.IsNullOrWhiteSpace(user.Key))
         {
+            // Key is deprecated in favor of UserDecryptionOptions.MasterPasswordUnlock.MasterKeyEncryptedUserKey
             customResponse.Add("Key", user.Key);
         }