diff --git a/Debian-Buster-Root-on-ZFS.md b/Debian-Buster-Root-on-ZFS.md
index f75f8a5..e0fc3a0 100644
--- a/Debian-Buster-Root-on-ZFS.md
+++ b/Debian-Buster-Root-on-ZFS.md
@@ -606,6 +606,15 @@ If you prefer the graphical boot process, you can re-enable it now. If you are u
 
 * Ignore errors from `osprober`, if present.
 
+9.5  Optional: For LUKS installs only, backup the LUKS header:
+
+    $ sudo cryptsetup luksHeaderBackup /dev/disk/by-id/scsi-SATA_disk1-part4 \
+        --header-backup-file luks1-header.dat
+
+Store that backup somewhere safe (e.g. cloud storage). It is protected by your LUKS passphrase, but you may wish to use additional encryption.
+
+**Hint:** If you created a mirror or raidz topology, repeat this for each luks volume (`luks2`, etc.).
+
 ## Troubleshooting
 
 ### Rescuing using a Live CD
diff --git a/Debian-Stretch-Root-on-ZFS.md b/Debian-Stretch-Root-on-ZFS.md
index c51ff7f..bd8f49e 100644
--- a/Debian-Stretch-Root-on-ZFS.md
+++ b/Debian-Stretch-Root-on-ZFS.md
@@ -616,6 +616,15 @@ If you prefer the graphical boot process, you can re-enable it now. If you are u
 
 * Ignore errors from `osprober`, if present.
 
+9.5  Optional: For LUKS installs only, backup the LUKS header:
+
+    $ sudo cryptsetup luksHeaderBackup /dev/disk/by-id/scsi-SATA_disk1-part4 \
+        --header-backup-file luks1-header.dat
+
+Store that backup somewhere safe (e.g. cloud storage). It is protected by your LUKS passphrase, but you may wish to use additional encryption.
+
+**Hint:** If you created a mirror or raidz topology, repeat this for each luks volume (`luks2`, etc.).
+
 ## Troubleshooting
 
 ### Rescuing using a Live CD
diff --git a/Ubuntu-18.04-Root-on-ZFS.md b/Ubuntu-18.04-Root-on-ZFS.md
index 78612cc..274989b 100644
--- a/Ubuntu-18.04-Root-on-ZFS.md
+++ b/Ubuntu-18.04-Root-on-ZFS.md
@@ -637,6 +637,15 @@ If you prefer the graphical boot process, you can re-enable it now. If you are u
 
 * Ignore errors from `osprober`, if present.
 
+9.5  Optional: For LUKS installs only, backup the LUKS header:
+
+    $ sudo cryptsetup luksHeaderBackup /dev/disk/by-id/scsi-SATA_disk1-part4 \
+        --header-backup-file luks1-header.dat
+
+Store that backup somewhere safe (e.g. cloud storage). It is protected by your LUKS passphrase, but you may wish to use additional encryption.
+
+**Hint:** If you created a mirror or raidz topology, repeat this for each luks volume (`luks2`, etc.).
+
 ## Troubleshooting
 
 ### Rescuing using a Live CD