diff --git a/src/translation/en.json b/src/translation/en.json
index dd61b245d..5c62a1069 100644
--- a/src/translation/en.json
+++ b/src/translation/en.json
@@ -449,7 +449,9 @@
             "revokeTokenTooltip": "Revoke Token",
             "lastUsed": "Last Used",
             "neverUsed": "never",
-            "scope": "Scope"
+            "scope": "Scope",
+            "readonly": "Readonly",
+            "readwrite": "Read and Write"
         },
         "loginTokens": {
             "title": "Login Tokens",
@@ -490,7 +492,8 @@
             "errorNameRequired": "A name is required",
             "description": "New API token:",
             "copyNow": "Please copy the API token now. It won't be shown again for security purposes.",
-            "generateToken": "Generate API Token"
+            "generateToken": "Generate API Token",
+            "access": "API Access"
         },
         "changePasswordAction": "Change Password",
         "disable2FAAction": "Disable 2FA",
diff --git a/src/views/profile.html b/src/views/profile.html
index f114f2ecc..886ed9c4e 100644
--- a/src/views/profile.html
+++ b/src/views/profile.html
@@ -334,10 +334,15 @@
                 <input type="text" class="form-control" id="inputApiTokenName" ng-model="tokens.add.name" name="name" required autofocus>
               </div>
 
-              <div class="checkbox">
-                <label>
-                  <input type="checkbox" ng-model="tokens.add.readWrite">Read and write API access</input>
-                </label>
+              <div class="form-group">
+                <label class="control-label">{{ 'profile.createApiToken.access' | tr }}</label>
+
+                <div class="radio">
+                  <label><input type="radio" ng-model="tokens.add.scope" value="r"> {{ 'profile.apiTokens.readonly' | tr }}</label>
+                </div>
+                <div class="radio">
+                  <label><input type="radio" ng-model="tokens.add.scope" value="rw"> {{ 'profile.apiTokens.readwrite' | tr }}</label>
+                </div>
               </div>
 
               <input class="ng-hide" type="submit" ng-disabled="apiTokenAddForm.$invalid"/>
@@ -503,8 +508,8 @@
                   <span ng-show="!token.lastUsedTime">{{ 'profile.apiTokens.neverUsed' | tr }}</span>
                 </td>
                 <td>
-                  <span ng-show="token.scope['*'] === 'rw'">Read+Write</span>
-                  <span ng-hide="token.scope['*'] === 'rw'">Read</span>
+                  <span ng-show="token.scope['*'] === 'rw'">{{ 'profile.apiTokens.readwrite' | tr }}</span>
+                  <span ng-hide="token.scope['*'] === 'rw'">{{ 'profile.apiTokens.readonly' | tr }}</span>
                 </td>
                 <td class="text-right no-wrap" style="vertical-align: bottom">
                   <button class="btn btn-xs btn-danger" ng-click="tokens.revokeToken(token)" uib-tooltip="{{ 'profile.apiTokens.revokeTokenTooltip' | tr }}"><i class="far fa-trash-alt"></i></button>
diff --git a/src/views/profile.js b/src/views/profile.js
index 063cadc09..afbb4a33b 100644
--- a/src/views/profile.js
+++ b/src/views/profile.js
@@ -662,12 +662,12 @@ angular.module('Application').controller('ProfileController', ['$scope', '$trans
             error: null,
             name: '',
             accessToken: '',
-            readWrite: true,
+            scope: 'rw',
 
             show: function () {
                 $scope.tokens.add.name = '';
                 $scope.tokens.add.accessToken = '';
-                $scope.tokens.add.readWrite = true;
+                $scope.tokens.add.scope = 'rw';
                 $scope.tokens.add.busy = false;
                 $scope.tokens.add.error = null;
                 $scope.apiTokenAddForm.name.$setPristine();
@@ -678,7 +678,7 @@ angular.module('Application').controller('ProfileController', ['$scope', '$trans
             submit: function () {
                 $scope.tokens.add.busy = true;
 
-                var scope = { '*': $scope.tokens.add.readWrite ? 'rw' : 'r' };
+                var scope = { '*': $scope.tokens.add.scope };
 
                 Client.createToken($scope.tokens.add.name, scope, function (error, result) {
                     if (error) {