diff --git a/internal/app/vault.go b/internal/app/vault.go
index 55b583b1..af5e1238 100644
--- a/internal/app/vault.go
+++ b/internal/app/vault.go
@@ -80,6 +80,7 @@ func newVault(locations *locations.Locations) (*vault.Vault, bool, bool, error)
 	)
 
 	if key, err := loadVaultKey(vaultDir); err != nil {
+		logrus.WithError(err).Error("Could not load/create vault key")
 		insecure = true
 
 		// We store the insecure vault in a separate directory