diff --git a/CHANGELOG.md b/CHANGELOG.md
index 637807b1364d6cf20d69483899da96cb1a4d38fd..b4808dc46e76a14f0da24c7d9adedfe2d66b9ca4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Revision history for terraform-http-backend-pass
 
+## Unreleased changes
+
+* GetState: Fix existence check.
+
 ## 0.1.0.0 -- 2021-02-28
 
 * First version. Released on an unsuspecting world.
diff --git a/src/Terraform/HttpBackend/Pass/App.hs b/src/Terraform/HttpBackend/Pass/App.hs
index d2e86394ed7d569b35cc4eb38a074feb2a2e174c..5fdc0abd48e9a0eae609c4efde86d72a645318c2 100644
--- a/src/Terraform/HttpBackend/Pass/App.hs
+++ b/src/Terraform/HttpBackend/Pass/App.hs
@@ -51,7 +51,8 @@ instance (Monad m, MonadIO m) => MonadPass (AppT m) where
       Shelly.run_ "pass" ["rm", name]
   exists name = do
     Env {..} <- ask
-    liftIO $ doesFileExist (directory <> "/" <> Text.unpack name)
+    let path = directory <> "/" <> Text.unpack name <> ".gpg"
+    liftIO $ doesFileExist path
 
 runAppT :: Env -> AppT m a -> m a
 runAppT env (AppT r) = runReaderT r env