diff --git a/security/split-gpg.md b/security/split-gpg.md
index e66e22fd..815308e8 100644
--- a/security/split-gpg.md
+++ b/security/split-gpg.md
@@ -161,7 +161,7 @@ the content of the file `/rw/config/gpg-split-domain`, which should be set to
 the name of the GPG backend VM. This file survives the AppVM reboot, of course.
 
     [user@work ~]$ sudo bash
-    [user@work ~]$ echo "work-gpg" > /rw/config/gpg-split-domain
+    [root@work ~]$ echo "work-gpg" > /rw/config/gpg-split-domain
 
 A note on passphrases: