diff --git a/security.rst b/security.rst
index 1e6a5ab98e2..e1e1b106656 100644
--- a/security.rst
+++ b/security.rst
@@ -981,7 +981,7 @@ Enable the authenticator using the ``json_login`` setting:
                 main:
                     # ...
                     json_login:
-                        # app_login is a route we will create below
+                        # api_login is a route we will create below
                         check_path: api_login
 
     .. code-block:: xml