diff --git a/android-client/web/app.html b/android-client/web/app.html
index 73f5639..5534fd4 100644
--- a/android-client/web/app.html
+++ b/android-client/web/app.html
@@ -593,9 +593,9 @@
The sync password never leaves this device. It is what
encrypts the copy kept in the repository, so it must be the same on every
device that shares it; the token only opens the repository. It is asked
- for once: afterwards the vault opens with whatever you pick under
- Unlock with below - the phone screen lock, an app code, or this
- password.
+ for once: afterwards the vault opens with the phone screen lock, an app
+ code, or this password - your choice, under Unlock with, which
+ appears in these settings once the vault is open.