diff --git a/src/security.rs b/src/security.rs
index 652d522..529878e 100644
--- a/src/security.rs
+++ b/src/security.rs
@@ -273,13 +273,12 @@ extern "win64" fn run() -> bool {
     };
 
     debugln!("security state: {:?}", security_state);
-    if security_state == SecurityState::Lock {
-        // Already locked, so do not confirm
+
+    // Only show prompt when unlocking
+    if security_state != SecurityState::PrepareUnlock {
         return false;
     }
 
-    // Not locked, require confirmation
-
     let res = match Output::one() {
         Ok(output) => {
             let mut display = Display::new(output);