diff --git a/cmd/dkl-local-server/ws-store.go b/cmd/dkl-local-server/ws-store.go
index 331b3ca..bfcc44a 100644
--- a/cmd/dkl-local-server/ws-store.go
+++ b/cmd/dkl-local-server/ws-store.go
@@ -29,9 +29,6 @@ func wsStoreAddKey(req *restful.Request, resp *restful.Response) {
 		return
 	}
 
-	secStore.AddKey(np.Name, np.Passphrase)
-	defer updateState()
-
 	for _, k := range secStore.Keys {
 		if k.Name == np.Name {
 			wsBadRequest(resp, "there's already a passphrase named "+strconv.Quote(np.Name))
@@ -39,6 +36,9 @@ func wsStoreAddKey(req *restful.Request, resp *restful.Response) {
 		}
 	}
 
+	secStore.AddKey(np.Name, np.Passphrase)
+	defer updateState()
+
 	err = secStore.SaveTo(secKeysStorePath())
 	if err != nil {
 		wsError(resp, err)