diff --git a/secret.c b/secret.c
index 99dfc84..ea61ee0 100644
--- a/secret.c
+++ b/secret.c
@@ -374,7 +374,7 @@ s_do(int argc, char **argv, void *data)
     unsigned char secret[S_ENTRYSIZE];
 
     if (op->generate) {
-        size_t len = 24;
+        size_t len = 25;
         hydro_memzero(secret, sizeof(secret));
         hydro_random_buf(secret, len);