diff --git a/pkg/config/api_key_pair.go b/pkg/config/api_key_pair.go
index ee4b1ca2ec..f81ac294e2 100644
--- a/pkg/config/api_key_pair.go
+++ b/pkg/config/api_key_pair.go
@@ -1,7 +1,6 @@
 package config
 
 import (
-	"runtime"
 	"strings"
 
 	"github.com/confluentinc/cli/v4/pkg/secret"
@@ -16,7 +15,7 @@ type APIKeyPair struct {
 }
 
 func (c *APIKeyPair) DecryptSecret() error {
-	if (strings.HasPrefix(c.Secret, secret.AesGcm) && c.Salt != nil) || runtime.GOOS == "windows" {
+	if (strings.HasPrefix(c.Secret, secret.AesGcm) && c.Salt != nil) || strings.HasPrefix(c.Secret, secret.Dpapi) {
 		decryptedSecret, err := secret.Decrypt(c.Key, c.Secret, c.Salt, c.Nonce)
 		if err != nil {
 			return err