diff --git a/hypridle.conf b/hypridle.conf
index 1a0f793..4b78362 100644
--- a/hypridle.conf
+++ b/hypridle.conf
@@ -1,5 +1,6 @@
 general {
     lock_cmd = pidof hyprlock || hyprlock       # avoid starting multiple hyprlock instances.
+    unlock_cmd = ~/.local/bin/unlock-ring.sh    # run when session is unlocked (hyprlock exits)
     before_sleep_cmd = loginctl lock-session    # lock before suspend.
     after_sleep_cmd = hyprctl dispatch dpms on  # to avoid having to press a key twice to turn on the display.
 }
@@ -17,17 +18,10 @@ listener {
     on-resume = brightnessctl -rd rgb:kbd_backlight        # turn on keyboard backlight.
 }
 
-#listener {
-#    timeout = 300                                 # 5min
-#    on-timeout = loginctl lock-session            # lock screen when timeout has passed
-#}
-
 listener {
     timeout = 300                                 
-    # 1. Lock the vault via DBus, 2. Start the lock screen
-    on-timeout = busctl --user call org.freedesktop.secrets /org/freedesktop/secrets org.freedesktop.Secret.Service Lock "as" 1 "/org/freedesktop/secrets/aliases/default" && hyprlock
-    # When hyprlock exits (via fingerprint or password), instantly run the unlock script
-    on-resume = ~/.local/bin/unlock-ring.sh
+    # 1. Lock the vault via DBus, 2. Start the lock screen (using ';' so it locks even if the vault fails/is already locked)
+    on-timeout = busctl --user call org.freedesktop.secrets /org/freedesktop/secrets org.freedesktop.Secret.Service Lock "as" 1 "/org/freedesktop/secrets/aliases/default" ; loginctl lock-session
 }
 
 listener {