diff --git a/S3-Credentials.md b/S3-Credentials.md
index c3f1896..eb97203 100644
--- a/S3-Credentials.md
+++ b/S3-Credentials.md
@@ -339,7 +339,7 @@ As soon as **at least one identity** is configured using any method:
 ### Toggling Behavior
 
 - **Initial State**: If you start `weed mini` (or `weed s3`) with credentials, it starts in "Authentication Required" mode.
-- **Dynamic Transition**: If you start `weed mini` without credentials (in "Allow-All" mode) and then add a user via the **Admin UI** or **weed shell**, the server will **automatically transition** to "Authentication Required" mode. All subsequent requests will require valid credentials.
+- **Dynamic Transition (One-Way)**: If you start without credentials (in "Allow-All" mode) and then add any identity, the server will **automatically and permanently transition** to "Authentication Required" mode. Once enabled, authentication will remain required even if all credentials are later removed.
 
 ## Configuration Reloading