diff --git a/security/secrets/README.md b/security/secrets/README.md
index 57f5422..226ee40 100644
--- a/security/secrets/README.md
+++ b/security/secrets/README.md
@@ -268,15 +268,7 @@ the secret from memory.
 In this step you will remove all secrets and services,as well as clean up any other artifacts created in this lab.
 
 
-1. Remove all secrets on the host.
-
-   This command will remove **all** secrets on your Docker host. Only perform this step if you know you will not use these secrets again.
-
-   ```
-   $ docker secret rm $(docker secret ls -q)
-   <Snip>
-   ```
-2. Remove all services on the host.
+1. Remove all services on the host.
 
    This command will remove **all** services on your Docker host. Only perform this step if you know you know you do not need any of the services running on your system.
 
@@ -284,6 +276,14 @@ In this step you will remove all secrets and services,as well as clean up any ot
    $ docker service rm $(docker service ls -q)
    <Snip>
    ```
+2. Remove all secrets on the host.
+
+   This command will remove **all** secrets on your Docker host. Only perform this step if you know you will not use these secrets again.
+
+   ```
+   $ docker secret rm $(docker secret ls -q)
+   <Snip>
+   ```
 
 3. If you haven;t already done so, delete the file that you used as the source of the secret data in Step 1. The lab assumed this was **node1** in your lab.