diff --git a/server/keystore.go b/server/keystore.go
index 19a1d1a3a5f4dc3f4cfe9fade7e1c76c6b17142e..39ce5ee28f55660acde33bed925f29ca615d6e61 100644
--- a/server/keystore.go
+++ b/server/keystore.go
@@ -116,7 +116,7 @@ func (s *KeyStore) expire() {
 	for t := range time.NewTicker(600 * time.Second).C {
 		s.mx.Lock()
 		for u, k := range s.userKeys {
-			if k.expiry.After(t) {
+			if k.expiry.Before(t) {
 				wipeBytes(k.pkey)
 				delete(s.userKeys, u)
 			}