diff --git a/web/config.js b/web/config.js
index 73bba55..ddbf8ee 100644
--- a/web/config.js
+++ b/web/config.js
@@ -30,13 +30,13 @@
       "setup.fetchError": "Unable to read the service startup status right now. To protect management credentials, the authorization entry stays hidden; confirm the service is available and re-check.",
       "auth.eyebrow": "Authorization required",
       "auth.title": "Create admin session",
-      "auth.bodyPre": "Enter the value of the required startup key ",
-      "auth.bodyPost": ". The server issues a 15-minute admin session; the key and session exist only in the current page memory.",
+      "auth.bodyPre": "Enter ",
+      "auth.bodyPost": ". The session lasts 15 minutes and lives only in this page's memory.",
       "auth.label": "Business encryption key",
-      "auth.placeholder": "Enter the CONFIG_ENCRYPTION_KEY value",
+      "auth.placeholder": "Paste the value",
       "auth.submit": "Create session",
       "auth.submitBusy": "Authorizing…",
-      "auth.hint": "Never written to localStorage, sessionStorage or cookies. You must re-authorize after closing or refreshing the page.",
+      "auth.hint": "You must re-authorize after closing or refreshing the page.",
       "config.aria": "Business configuration and runtime parameters",
       "session.active": "Admin session active",
       "session.expiryDefault": "Session kept only in current page memory",
@@ -232,13 +232,13 @@
       "setup.fetchError": "暂时无法读取服务启动状态。为保护管理凭据，授权入口保持隐藏；请确认服务可用后重新检查。",
       "auth.eyebrow": "需要授权",
       "auth.title": "创建管理会话",
-      "auth.bodyPre": "输入启动必填的环境变量 ",
-      "auth.bodyPost": " 的值。服务端会签发有效期 15 分钟的管理会话；该值与会话只在当前页面内存中使用。",
+      "auth.bodyPre": "输入 ",
+      "auth.bodyPost": "，管理会话有效期 15 分钟，只存在当前页面内存中。",
       "auth.label": "业务加密密钥",
-      "auth.placeholder": "输入 CONFIG_ENCRYPTION_KEY 的值",
+      "auth.placeholder": "粘贴该值",
       "auth.submit": "创建会话",
       "auth.submitBusy": "正在授权…",
-      "auth.hint": "不会写入 localStorage、sessionStorage 或 Cookie。关闭或刷新页面后需要重新授权。",
+      "auth.hint": "关闭或刷新页面后需要重新授权。",
       "config.aria": "业务配置与运行参数",
       "session.active": "管理会话有效",
       "session.expiryDefault": "会话仅保存在当前页面内存",
diff --git a/web/index.html b/web/index.html
index 5984ee1..a822826 100644
--- a/web/index.html
+++ b/web/index.html
@@ -54,14 +54,14 @@
           </div>
           <div><p class="eyebrow" data-i18n="auth.eyebrow">Authorization required</p><h2 id="auth-title" data-i18n="auth.title">Create admin session</h2></div>
         </div>
-        <p class="panel-copy"><span data-i18n="auth.bodyPre">Enter the value of the required startup key </span><code>CONFIG_ENCRYPTION_KEY</code><span data-i18n="auth.bodyPost">. The server issues a 15-minute admin session; the key and session exist only in the current page memory.</span></p>
+        <p class="panel-copy"><span data-i18n="auth.bodyPre">Enter </span><code>CONFIG_ENCRYPTION_KEY</code><span data-i18n="auth.bodyPost">. The session lasts 15 minutes and lives only in this page's memory.</span></p>
         <form id="auth-form" class="auth-form" autocomplete="off">
           <label for="bootstrap-input" data-i18n="auth.label">Business encryption key</label>
           <div class="token-row">
-            <input id="bootstrap-input" name="admin-credential" type="password" autocomplete="new-password" spellcheck="false" required data-i18n-placeholder="auth.placeholder" placeholder="Enter the CONFIG_ENCRYPTION_KEY value" aria-describedby="bootstrap-hint" />
+            <input id="bootstrap-input" name="admin-credential" type="password" autocomplete="new-password" spellcheck="false" required data-i18n-placeholder="auth.placeholder" placeholder="Paste the value" aria-describedby="bootstrap-hint" />
             <button id="connect-button" class="button button-primary" type="submit" data-i18n="auth.submit">Create session</button>
           </div>
-          <p id="bootstrap-hint" class="field-hint" data-i18n="auth.hint">Never written to localStorage, sessionStorage or cookies. You must re-authorize after closing or refreshing the page.</p>
+          <p id="bootstrap-hint" class="field-hint" data-i18n="auth.hint">You must re-authorize after closing or refreshing the page.</p>
         </form>
       </section>