diff --git a/modules/services/barrier.nix b/modules/services/barrier.nix
index 21364b7a3..b619cb287 100644
--- a/modules/services/barrier.nix
+++ b/modules/services/barrier.nix
@@ -70,7 +70,7 @@ in {
       Service.ExecStart = with cfg.client;
         toString ([ "${pkgs.barrier}/bin/barrierc" ]
           ++ optional (name != null) "--name ${name}"
-          ++ optional enableCrypto "--enable-crypto"
+          ++ optional (!enableCrypto) "--disable-crypto"
           ++ optional enableDragDrop "--enable-drag-drop" ++ extraFlags
           ++ [ server ]);
     };
diff --git a/tests/modules/services/barrier/basic-configuration.nix b/tests/modules/services/barrier/basic-configuration.nix
index 03b1beae7..d08342856 100644
--- a/tests/modules/services/barrier/basic-configuration.nix
+++ b/tests/modules/services/barrier/basic-configuration.nix
@@ -13,7 +13,7 @@
       clientServiceFile=home-files/.config/systemd/user/barrierc.service
 
       assertFileExists $clientServiceFile
-      assertFileRegex $clientServiceFile 'ExecStart=.*/bin/barrierc --enable-crypto -f testServer'
+      assertFileRegex $clientServiceFile 'ExecStart=.*/bin/barrierc -f testServer'
     '';
   };
 }