diff --git a/docs/en/security/secure-boot.rst b/docs/en/security/secure-boot.rst
index bec0dbdbf1..79baa87255 100644
--- a/docs/en/security/secure-boot.rst
+++ b/docs/en/security/secure-boot.rst
@@ -258,7 +258,9 @@ To generate a bootloader digest::
 
   espsecure.py digest_secure_bootloader --keyfile ./securebootkey.bin --output ./bootloader-digest.bin build/bootloader/bootloader.bin
 
-Keyfile is the 32 byte raw secure boot key for the device. To flash this digest onto the device::
+Keyfile is the 32 byte raw secure boot key for the device.
+
+The output of the ``espsecure.py digest_secure_bootloader`` command is a single file which contains both the digest and the bootloader appended to it. To flash the combined digest plus bootloader to the device::
 
   esptool.py write_flash 0x0 bootloader-digest.bin