diff --git a/docs/2-handbook/swarm/credentials.md b/docs/2-handbook/swarm/credentials.md
index 2f3686c1f..c7f7111b5 100644
--- a/docs/2-handbook/swarm/credentials.md
+++ b/docs/2-handbook/swarm/credentials.md
@@ -244,7 +244,7 @@ every swarm service's client secret, and that's stated in
 principal by the subject of the certificate it presents — so five readers behind
 one leaf were one principal holding the union of their needs. Each now holds a
 leaf of its own, and a policy naming only the path that unit reads. See
-[per-principal identities](../../4-implementation/swarm/credentials.md#per-principal-identities) below.
+[per-principal identities](../../4-implementation/swarm/credentials.md#per-principal-identities).
 
 Absence behaves
 as it does for the other readers: a store that says "not here" leaves the