diff --git a/docs/client-libraries-websocket.md b/docs/client-libraries-websocket.md
index a1874fb89da6..ad848860a519 100644
--- a/docs/client-libraries-websocket.md
+++ b/docs/client-libraries-websocket.md
@@ -81,6 +81,7 @@ All exchanges via the WebSocket API use JSON.
 ### Authentication
 
 #### Browser javascript WebSocket client
+> For security reasons, we suggest passing the token as headers rather than as query parameters.
 
 Use the query param `token` to transport the authentication token.
 
diff --git a/versioned_docs/version-3.0.x/client-libraries-websocket.md b/versioned_docs/version-3.0.x/client-libraries-websocket.md
index d3f63278529f..65222566e927 100644
--- a/versioned_docs/version-3.0.x/client-libraries-websocket.md
+++ b/versioned_docs/version-3.0.x/client-libraries-websocket.md
@@ -80,6 +80,7 @@ All exchanges via the WebSocket API use JSON.
 ### Authentication
 
 #### Browser javascript WebSocket client
+> For security reasons, we suggest passing the token as headers rather than as query parameters.
 
 Use the query param `token` to transport the authentication token.
 
diff --git a/versioned_docs/version-4.0.x/client-libraries-websocket.md b/versioned_docs/version-4.0.x/client-libraries-websocket.md
index a1874fb89da6..ad848860a519 100644
--- a/versioned_docs/version-4.0.x/client-libraries-websocket.md
+++ b/versioned_docs/version-4.0.x/client-libraries-websocket.md
@@ -81,6 +81,7 @@ All exchanges via the WebSocket API use JSON.
 ### Authentication
 
 #### Browser javascript WebSocket client
+> For security reasons, we suggest passing the token as headers rather than as query parameters.
 
 Use the query param `token` to transport the authentication token.