diff --git a/apidocs/openapi.yaml b/apidocs/openapi.yaml
index 64da3c1d..d202f24d 100644
--- a/apidocs/openapi.yaml
+++ b/apidocs/openapi.yaml
@@ -213,6 +213,8 @@ components:
           type: string
         maxReaders:
           type: integer
+        srtReadPassphrase:
+          type: string
         record:
           type: boolean
 
@@ -241,8 +243,6 @@ components:
           type: string
         srtPublishPassphrase:
           type: string
-        srtReadPassphrase:
-          type: string
 
         # RTSP
         sourceProtocol:
diff --git a/internal/conf/path.go b/internal/conf/path.go
index 03dfd458..444e0fdc 100644
--- a/internal/conf/path.go
+++ b/internal/conf/path.go
@@ -59,6 +59,7 @@ type PathConf struct {
 	SourceOnDemandStartTimeout StringDuration `json:"sourceOnDemandStartTimeout"`
 	SourceOnDemandCloseAfter   StringDuration `json:"sourceOnDemandCloseAfter"`
 	MaxReaders                 int            `json:"maxReaders"`
+	SRTReadPassphrase          string         `json:"srtReadPassphrase"`
 	Record                     bool           `json:"record"`
 
 	// Authentication
@@ -74,7 +75,6 @@ type PathConf struct {
 	DisablePublisherOverride bool   `json:"disablePublisherOverride"` // deprecated
 	Fallback                 string `json:"fallback"`
 	SRTPublishPassphrase     string `json:"srtPublishPassphrase"`
-	SRTReadPassphrase        string `json:"srtReadPassphrase"`
 
 	// RTSP
 	SourceProtocol      SourceProtocol `json:"sourceProtocol"`
diff --git a/mediamtx.yml b/mediamtx.yml
index 4c2e860c..4bf97ac5 100644
--- a/mediamtx.yml
+++ b/mediamtx.yml
@@ -1,4 +1,3 @@
-
 ###############################################
 # General settings
 
@@ -306,6 +305,8 @@ paths:
     sourceOnDemandCloseAfter: 10s
     # Maximum number of readers. Zero means no limit.
     maxReaders: 0
+    # SRT encryption passphrase require to read from this path
+    srtReadPassphrase:
     # Record streams to disk (if global recording is enabled).
     record: yes
 
@@ -338,10 +339,8 @@ paths:
     # if no one is publishing, redirect readers to this path.
     # It can be can be a relative path  (i.e. /otherstream) or an absolute RTSP URL.
     fallback:
-    # SRT encryption passphrase required to publish on this path
+    # SRT encryption passphrase required to publish to this path
     srtPublishPassphrase:
-    # SRT encryption passphrase require to read from this path
-    srtReadPassphrase:
 
     ###############################################
     # RTSP path settings (when source is a RTSP or a RTSPS URL)