Embodiments of the present disclosure disclose a security configuration method for a radio bearer and a device. The method may include: obtaining, by a base station, a first security configuration message, where the first security configuration message is used to indicate whether security configuration needs to be performed on each of N radio bearers set up between the base station and a terminal device, and indicate security configuration parameters for M radio bearers on which security configuration needs to be performed, where N is a positive integer, M is an integer, and M≤N; and sending, by the base station, the first security configuration message to the terminal device. According to the embodiments of the present disclosure, applicability of security configuration can be improved.