diff --git a/index.bs b/index.bs
index 6fac0abec..0e9dc593c 100644
--- a/index.bs
+++ b/index.bs
@@ -5635,7 +5635,8 @@ a numbered step. If outdented, it (today) is rendered as a bullet in the midst o
1. Verify that the [=rpIdHash=]
in |authData| is the SHA-256 hash of the [=RP ID=] expected by the [=[RP]=].
-1. Verify that the [=UP=] bit of the [=flags=]
in |authData| is set, unless |options|.{{CredentialCreationOptions/mediation}}
is set to {{CredentialMediationRequirement/conditional}}.
+1. If |options|.{{CredentialCreationOptions/mediation}}
is not set to {{CredentialMediationRequirement/conditional}},
+ verify that the [=UP=] bit of the [=flags=]
in |authData| is set.
1. If the [=[RP]=] requires [=user verification=] for this registration,
verify that the [=authData/flags/UV=] bit of the [=flags=]
in |authData| is set.