diff --git a/CHANGELOG b/CHANGELOG
index 1a14bfd..7296b48 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -27,6 +27,11 @@
   - All BFStop tables now use the utf8mb4 character set (like Joomla's own
     tables), so failed logins for usernames containing 4-byte characters
     (e.g. emoji) are recorded too, instead of failing to be stored
+  - Manual cleanup of failed login entries (#214): the component's failed
+    login list has a "Delete Old Entries" button, which asks for the age (in
+    days) of the entries to keep and deletes all older ones (blocks are not
+    affected), and a hint pointing at the setting for automatically deleting
+    old entries
   - Not implemented (documented as future work): CAPTCHA/challenge-based
     responses and IP-reputation/hosting-vs-residential classification were
     both considered but require either login-page changes or an