diff --git a/dm/dm-master-configuration-file.md b/dm/dm-master-configuration-file.md
index ec58677c0ab18..4f396e6ac9e88 100644
--- a/dm/dm-master-configuration-file.md
+++ b/dm/dm-master-configuration-file.md
@@ -60,4 +60,4 @@ This section introduces the configuration parameters of DM-master.
 | `ssl-cert` | The path of the file that contains X509 certificate in PEM format for DM-master to connect with other components. |
 | `ssl-key` | The path of the file that contains X509 key in PEM format for DM-master to connect with other components. |
 | `cert-allowed-cn` | Common Name list. |
-| `secret-key-path` | The file path of the secret key, which is used to encrypt and decrypt upstream and downstream passwords. The file must contain a 64-character hexadecimal AES-256 secret key. |
\ No newline at end of file
+| `secret-key-path` | The file path of the secret key, which is used to encrypt and decrypt upstream and downstream passwords. The file must contain a 64-character hexadecimal AES-256 secret key. One way to generate this key is by hashing random data, such as `head -n 256 /dev/urandom|sha256sum`. |
\ No newline at end of file