diff --git a/cmd/icingadb-migrate/main.go b/cmd/icingadb-migrate/main.go
index 9618ec2f..eefa1424 100644
--- a/cmd/icingadb-migrate/main.go
+++ b/cmd/icingadb-migrate/main.go
@@ -125,7 +125,7 @@ func parseConfig(f *Flags) (_ *Config, exit int) {
 		return nil, 2
 	}
 
-	if err := yaml.NewDecoder(cf).Decode(c); err != nil {
+	if err := yaml.NewDecoder(cf, yaml.DisallowUnknownField()).Decode(c); err != nil {
 		_, _ = fmt.Fprintf(os.Stderr, "can't parse config file: %s\n", err.Error())
 		return nil, 2
 	}
diff --git a/pkg/config/config.go b/pkg/config/config.go
index 1388ba93..db6662c3 100644
--- a/pkg/config/config.go
+++ b/pkg/config/config.go
@@ -54,7 +54,7 @@ func FromYAMLFile(name string) (*Config, error) {
 	defer f.Close()
 
 	c := &Config{}
-	d := yaml.NewDecoder(f)
+	d := yaml.NewDecoder(f, yaml.DisallowUnknownField())
 
 	if err := defaults.Set(c); err != nil {
 		return nil, errors.Wrap(err, "can't set config defaults")