diff --git a/docs/vmagent.md b/docs/vmagent.md
index 6b0680ae5b..1dda7be65c 100644
--- a/docs/vmagent.md
+++ b/docs/vmagent.md
@@ -126,7 +126,7 @@ additionally to pull-based Prometheus-compatible targets' scraping:
   kill -SIGHUP `pidof vmagent`
   ```
 
-* Sending HTTP request to `http://vmagent:8429/-/reload` endpoint.
+* Sending HTTP request to `http://vmagent:8429/-/reload` endpoint. This endpoint can be protected with `-reloadAuthKey` command-line flag.
 
 There is also `-promscrape.configCheckInterval` command-line option, which can be used for automatic reloading configs from updated `-promscrape.config` file.
 
diff --git a/docs/vmalert.md b/docs/vmalert.md
index cbcdc55429..20a88a3507 100644
--- a/docs/vmalert.md
+++ b/docs/vmalert.md
@@ -1420,9 +1420,8 @@ The shortlist of configuration flags is the following:
 `vmalert` supports "hot" config reload via the following methods:
 
 * send SIGHUP signal to `vmalert` process;
-* send GET request to `/-/reload` endpoint;
-* configure `-configCheckInterval` flag for periodic reload
-  on config change.
+* send GET request to `/-/reload` endpoint (this endpoint can be protected with `-reloadAuthKey` command-line flag);
+* configure `-configCheckInterval` flag for periodic reload on config change.
 
 ### URL params