diff --git a/CloudBuilder/CloudBuilder.Security.Service/WebAuthnService.cs b/CloudBuilder/CloudBuilder.Security.Service/WebAuthnService.cs
index c0145c3..643f4c5 100644
--- a/CloudBuilder/CloudBuilder.Security.Service/WebAuthnService.cs
+++ b/CloudBuilder/CloudBuilder.Security.Service/WebAuthnService.cs
@@ -166,7 +166,7 @@ namespace CloudBuilder.Security.Service
 
             uint newCounter = result.SignCount;
 
-            if (newCounter <= storedCounter)
+            if (newCounter < storedCounter)
             {
                 throw new InvalidOperationException(
                     $"WebAuthn counter regression: stored={storedCounter}, new={newCounter}");