diff --git a/nspanel_esphome.yaml b/nspanel_esphome.yaml
index 57b2b14..a9ba904 100644
--- a/nspanel_esphome.yaml
+++ b/nspanel_esphome.yaml
@@ -11,8 +11,10 @@
   # ## usage of secrets-file ## -> comment in ###### Change ME ######
   # device_name: "nspanel-name" # Wird im Blueprint benötigt!
   # wifi_ssid: !secret nspanel_wifi_ssid # add in your esphome secrets file.
-  # wifi_password: !secret nspanel_wifi_password # add in your esphome secrets file.
-  # ota_password: !secret nspanel_ota_password # add in your esphome secrets file.
+  # wifi_password: !secret nspanel_wifi_password # add in your esphome secrets file. -> per default this is also used for ota_password and web_password
+  # ota_password: !secret nspanel_ota_password # add in your esphome secrets file. - manual change in code required to activate
+  # web_password: !secret nspanel_web_password # add in your esphome secrets file. - manual change in code required to activate
+  # api_password: !secret nspanel_api_password # add in your esphome secrets file. - manual change in code required to activate
   # nextion_update_url: !secret nspanel_update_url # add in your esphome secrets file. Example: "http://"HOME ASSISTANT IP":8123/local/nspanel/nspanel.tft"
 
   # ## static ip config ##
@@ -22,6 +24,11 @@
   # dns: "10.0.0.138"
   # domain: ".local"
 
+##### if you rename this file to .nspanel_esphome.yaml then you can activate nested config
+##### use the ADVANCED CONFIG-Section as device configuration
+##### https://esphome.io/guides/configuration-types.html#yaml-insertion-operator
+# <<: !include .nspanel_esphome.yaml
+
 ##### END OF ADVANCED CONFIGURATION ##############################################################
 
 ##### WIFI SETUP #####
@@ -36,7 +43,7 @@ wifi:
   #   subnet: ${subnet}
   #   dns1: ${dns}
   # domain: ${domain}
-  # Enable fallback hotspot (captive portal) in case wifi connection fails
+  ##### Enable fallback hotspot (captive portal) in case wifi connection fails
   ap:
     ssid: "${device_name}"
     password: ${wifi_password}
@@ -62,11 +69,15 @@ web_server:
   port: 80
   auth:
     username: admin
-    password: ${ota_password}
+    password: ${wifi_password}
+    ##### advanced config - change to use web_password ##### 
+    # password: ${web_password}
 
 ##### OTA PASSWORD #####
 ota:
-  password: ${ota_password}
+  password: ${wifi_password}
+  ##### advanced config - change to use ota_password ##### 
+  # password: ${ota_password}
   safe_mode: true
   reboot_timeout: 3min
   num_attempts: 3
@@ -105,6 +116,8 @@ button:
 
 ##### START - API CONFIGURATION #####
 api:
+  ##### advanced config - activate to use api_password ##### 
+  # password: ${api_password}
   services:
 
     ##### SERVICE TO UPDATE THE HMI FILE #####