diff --git a/lib/krb5/krb5.conf.5 b/lib/krb5/krb5.conf.5
index 613946518..93a2201ee 100644
--- a/lib/krb5/krb5.conf.5
+++ b/lib/krb5/krb5.conf.5
@@ -143,6 +143,9 @@ Default realm to use, this is also known as your
 .Dq local realm .
 The default is the result of
 .Fn krb5_get_host_realm "local hostname" .
+.It Li allow_weak_crypto = Va boolean
+is weaks crypto algorithms allowed to be used, among others, DES is
+considered weak.
 .It Li clockskew = Va time
 Maximum time differential (in seconds) allowed when comparing
 times.