diff --git a/ChangeLog.md b/ChangeLog.md
new file mode 100644
--- /dev/null
+++ b/ChangeLog.md
@@ -0,0 +1,44 @@
+## 1.4.2.1
+
+* Add ChangeLog
+
+## 1.4.2
+
+* Deprecate `getAuthIdHashDB` (see [#5](https://github.com/paul-rouse/yesod-auth-hashdb/issues/5))
+
+## 1.4.1.2
+
+* Use internationalized messages
+* Increase `defaultStrength`
+
+## 1.4.1.1
+
+* Minor documentation change
+
+## 1.4.1
+
+* Expose additional validation function which does not need to read the database
+* Deprecate compatibility with old data which includes a salt field
+
+## 1.4.0
+
+* Changes for Yesod 1.4
+
+## 1.3.2
+
+* Documentation improvement
+
+## 1.3.1
+
+* Optional custom login form
+* Deprecate predefined `User` data type
+* Changes for Persistent 2
+
+## 1.3.0.1
+
+* Version bounds
+* Minor documentation changes
+
+## 1.3
+
+* First release as a separate package, not part of yesod-auth
diff --git a/yesod-auth-hashdb.cabal b/yesod-auth-hashdb.cabal
--- a/yesod-auth-hashdb.cabal
+++ b/yesod-auth-hashdb.cabal
@@ -1,5 +1,5 @@
 name:            yesod-auth-hashdb
-version:         1.4.2
+version:         1.4.2.1
 license:         MIT
 license-file:    LICENSE
 author:          Patrick Brisbin, later changes Paul Rouse
@@ -26,6 +26,7 @@
     since only the low-level password-setting functions are provided by this
     package.  (Note that other authentication plugins may be more appropriate
     if you wish to use email verification to set up accounts).
+extra-source-files:  ChangeLog.md
 
 library
     build-depends:   base                    >= 4          && < 5