diff --git a/objects.go b/objects.go
index 263af9b..42dc96e 100644
--- a/objects.go
+++ b/objects.go
@@ -7,6 +7,7 @@ import (
 	"encoding/pem"
 	"errors"
 	"fmt"
+	"strings"
 )
 
 // ViaMethod represents the methods available for new device registration
@@ -179,5 +180,5 @@ func (t AuthenticatorToken) Decrypt(passphrase string) (string, error) {
 	if err != nil {
 		return "", err
 	}
-	return string(buf), nil
+	return strings.ToUpper(string(buf)), nil
 }