diff --git a/pkgs/clan-cli/clan_cli/secrets/sops_generate.py b/pkgs/clan-cli/clan_cli/secrets/sops_generate.py
index c047c5d3f..733958371 100644
--- a/pkgs/clan-cli/clan_cli/secrets/sops_generate.py
+++ b/pkgs/clan-cli/clan_cli/secrets/sops_generate.py
@@ -43,7 +43,11 @@ def generate_secrets_group(
     needs_regeneration = any(
         not has_secret(flake_dir, f"{machine_name}-{secret['name']}")
         for secret in secrets.values()
+    ) or any(
+        not (flake_dir / fact["path"]).exists()
+        for fact in secret_options["facts"].values()
     )
+
     generator = secret_options["generator"]
     subdir = tempdir / secret_group
     if needs_regeneration: