diff --git a/core/.changelog.d/3922.fixed b/core/.changelog.d/3922.fixed
new file mode 100644
index 0000000000..d79a37945b
--- /dev/null
+++ b/core/.changelog.d/3922.fixed
@@ -0,0 +1 @@
+[T3T1] Fixed device authenticity check
diff --git a/core/embed/trezorhal/stm32u5/secret.c b/core/embed/trezorhal/stm32u5/secret.c
index 1f9622120d..ef2a096dc9 100644
--- a/core/embed/trezorhal/stm32u5/secret.c
+++ b/core/embed/trezorhal/stm32u5/secret.c
@@ -38,7 +38,7 @@ secbool secret_ensure_initialized(void) {
 
 secbool secret_bootloader_locked(void) {
 #ifdef FIRMWARE
-  return TAMP->BKP8R != 0 * sectrue;
+  return (TAMP->BKP8R != 0) * sectrue;
 #else
   return sectrue;
 #endif