diff --git a/src/views/services.html b/src/views/services.html
index 3e495c5e2..080fc49f6 100644
--- a/src/views/services.html
+++ b/src/views/services.html
@@ -21,10 +21,10 @@
             <div class="form-group" ng-show="serviceConfigure.service.name === 'sftp'">
               <br>
               <label class="control-label">Access Control</label>
-              <br>
+              <p><small>Allowing non-admins to access SFTP will let them read application config files and secret keys. For some apps like WordPress, they can also log the password.</small></p>
               <div class="checkbox">
                 <label>
-                  <input type="checkbox" ng-model="serviceConfigure.requireAdmin">Allow only admins to access SFTP</input>
+                  <input type="checkbox" ng-model="serviceConfigure.requireAdmin">Require admin role to access SFTP</input>
                 </label>
               </div>
             </div>