diff --git a/src/routes/console/project-[project]/auth/security/updatePasswordDictionary.svelte b/src/routes/console/project-[project]/auth/security/updatePasswordDictionary.svelte
index 839b0f2fe..755afe6c7 100644
--- a/src/routes/console/project-[project]/auth/security/updatePasswordDictionary.svelte
+++ b/src/routes/console/project-[project]/auth/security/updatePasswordDictionary.svelte
@@ -58,7 +58,9 @@
             </FormList>
             <p class="text">
                 When enabled it checks the user's password against the dictionary of most commonly
-                used password. It uses <a
+                used password. It uses <a 
+                    target="_blank"
+                    rel="noopener noreferrer"
                     class="link"
                     href="https://github.com/danielmiessler/SecLists/blob/master/Passwords/Common-Credentials/10k-most-common.txt"
                     >10K most common passwords</a> list.