diff --git a/README.md b/README.md
index 8064583..04b5327 100644
--- a/README.md
+++ b/README.md
@@ -119,7 +119,7 @@ In this instance `PUID=1001` and `PGID=1001`, to find yours use `id user` as bel
 Access the web gui at http://SERVERIP:PORT
 
 
-## Adding password protection
+### Adding password protection
 
 This image now supports password protection through htpasswd. Run the following command on your host to generate the htpasswd file `docker exec -it heimdall htpasswd -c /config/nginx/.htpasswd <username>`. Replace <username> with a username of your choice and you will be asked to enter a password. New installs will automatically pick it up and implement password protected access. Existing users updating their image can delete their site config at `/config/nginx/site-confs/default` and restart the container after updating the image. A new site config with htpasswd support will be created in its place.
 
diff --git a/readme-vars.yml b/readme-vars.yml
index 21c433f..173cb21 100644
--- a/readme-vars.yml
+++ b/readme-vars.yml
@@ -41,7 +41,7 @@ app_setup_block: |
   Access the web gui at http://SERVERIP:PORT
 
 
-  ## Adding password protection
+  ### Adding password protection
   
   This image now supports password protection through htpasswd. Run the following command on your host to generate the htpasswd file `docker exec -it heimdall htpasswd -c /config/nginx/.htpasswd <username>`. Replace <username> with a username of your choice and you will be asked to enter a password. New installs will automatically pick it up and implement password protected access. Existing users updating their image can delete their site config at `/config/nginx/site-confs/default` and restart the container after updating the image. A new site config with htpasswd support will be created in its place.