diff --git a/internal/app/vault.go b/internal/app/vault.go
index d49be879..983c329f 100644
--- a/internal/app/vault.go
+++ b/internal/app/vault.go
@@ -81,6 +81,7 @@ func newVault(locations *locations.Locations) (*vault.Vault, bool, bool, error)
 	)
 
 	if key, err := getVaultKey(vaultDir); err != nil {
+		logrus.WithError(err).Error("Could not load/create vault key")
 		insecure = true
 
 		// We store the insecure vault in a separate directory