diff --git a/subrosa_analysis.md b/subrosa_analysis.md
index 383acea..700e654 100644
--- a/subrosa_analysis.md
+++ b/subrosa_analysis.md
@@ -1,7 +1,15 @@
 # Sub Rosa Analysis 
+
+## Checkpoint 1
+
+Decrypt the message you received from the Sub Rosa administrator. 
+Include the code you used to decrypt it. What does the message say?
+
+## Checkpoint 2
+
 Once you have a fully-working client and server for encrypted chat, let's
 analyze potential vulnerabilities of the system. Answer the following
-questions in `subrosa_analysis.md`.
+questions:
 
 1. When you interact with the server at `https://subrosa.makingwithcode.org`,
    you have no way of knowing what code is running. If the people running