1 files changed, 6 insertions, 1 deletions
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/hub-client.js b/packages/meshbay-hub/src/meshbay_hub/static/hub-client.js
index ba91f00..3081ad8 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/hub-client.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/hub-client.js
@@ -159,7 +159,12 @@ async function _loadKey(slot) {
 // only groups joined in the unbroken session that generated it. Cleared with
 // everything else on sign-out.
 const _storeBundleKey   = (key) => _storeKey('bk', key);
-const _loadBundleKey    = ()    => _loadKey('bk');
+// A key stored before the pepper (`{v2, v1, …}`) opens nothing any more: it is
+// no key at all, and the group page asks for the passphrase again.
+const _loadBundleKey    = async () => {
+  const k = await _loadKey('bk');
+  return k && k.v3 ? k : null;
+};
 const _storeRecoveryKey = (key) => _storeKey('rk', key);
 const _loadRecoveryKey  = ()    => _loadKey('rk');
 async function _clearKeyDB() {