diff --git a/src/App/BridgeApp.ts b/src/App/BridgeApp.ts
index 83f90957..273e1d6a 100644
--- a/src/App/BridgeApp.ts
+++ b/src/App/BridgeApp.ts
@@ -51,7 +51,7 @@ export async function start(config: BridgeConfig, registration: IAppserviceRegis
 
     const botUsersManager = new BotUsersManager(config, appservice);
 
-    const tokenStore = await UserTokenStore.fromKeyPath(config.passFile , appservice.botIntent, config);
+    const tokenStore = await UserTokenStore.fromKeyPath(appservice.botIntent, config);
     const bridgeApp = new Bridge(config, tokenStore, listener, appservice, storage, botUsersManager);
 
     process.once("SIGTERM", () => {
diff --git a/src/config/Config.ts b/src/config/Config.ts
index 53eec002..1c2417ac 100644
--- a/src/config/Config.ts
+++ b/src/config/Config.ts
@@ -413,7 +413,7 @@ export interface BridgeConfigRoot {
     logging: BridgeConfigLogging;
     metrics?: BridgeConfigMetrics;
     passFile: string;
-    legacyPassFile: string;
+    legacyPassFile?: string;
     permissions?: BridgeConfigActorPermission[];
     provisioning?: BridgeConfigProvisioning;
     queue?: BridgeConfigQueue;
@@ -444,7 +444,7 @@ export class BridgeConfig {
  Run openssl genpkey -out passkey.pem -outform PEM -algorithm RSA -pkeyopt rsa_keygen_bits:4096 to generate`)
     public readonly passFile: string;
     @configKey(`A passkey that can be used to decrypt old values, and will not be used to encrypt new values.`, true)
-    public readonly legacyPassFile: string;
+    public readonly legacyPassFile?: string;
     @configKey("Configure this to enable GitHub support", true)
     public readonly github?: BridgeConfigGitHub;
     @configKey("Configure this to enable GitLab support", true)