diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index d27861a08..ed6f66b54 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -237,7 +237,7 @@ identity (such as EAP-TLS), but it does not match the IKEv2 gateway identity.
 includes conn section
 .BR <name> .
 .TP
-.BR authby " = " pubkey " | rsasig | ecdsasig | psk | never | xauthpsk | xauthrsasig"
+.BR authby " = " pubkey " | rsasig | ecdsasig | psk | secret | never | xauthpsk | xauthrsasig"
 how the two security gateways should authenticate each other;
 acceptable values are
 .B psk