diff --git a/android-client/web/app.html b/android-client/web/app.html
index 5534fd4..5d83aa7 100644
--- a/android-client/web/app.html
+++ b/android-client/web/app.html
@@ -594,8 +594,8 @@
       encrypts the copy kept in the repository, so it must be the same on every
       device that shares it; the token only opens the repository. It is asked
       for once: afterwards the vault opens with the phone screen lock, an app
-      code, or this password - your choice, under <b>Unlock with</b>, which
-      appears in these settings once the vault is open.</div>
+      code, or this password - your choice, under <b>Unlock with</b><span
+      id="sUnlockHint"></span>.</div>
 
     <!-- COFFRE FERME, SECTION CACHEE. Poser comme retirer un code exigent le
          clair en main : les deux ne pourraient que refuser, et proposer une
@@ -1633,6 +1633,10 @@ function openSettings() {
   document.getElementById('sPwd').value = elPwd.value;
   document.getElementById('sPinNew').value = '';
   document.getElementById('secCode').hidden = !vaultOpen;
+  // La section n'existe que coffre ouvert : le dire tant qu'elle manque, et se
+  // taire quand elle est juste en dessous.
+  document.getElementById('sUnlockHint').textContent =
+    vaultOpen ? ' below' : ', which appears in these settings once the vault is open';
   showLog(false);
   document.body.classList.add('on-settings');
   autoGrow(document.getElementById('sUrl'));   // mesurable seulement une fois affiche