diff --git a/plugins/counter/api.go b/plugins/counter/api.go
index 946783c..ef75bd3 100644
--- a/plugins/counter/api.go
+++ b/plugins/counter/api.go
@@ -205,7 +205,7 @@ func (p *CounterPlugin) handleCounterAPI(w http.ResponseWriter, r *http.Request)
 		log.Debug().
 			Interface("postbody", info).
 			Msg("Got a POST")
-		if p.b.CheckPassword("", info.Password) {
+		if !p.b.CheckPassword("", info.Password) {
 			w.WriteHeader(http.StatusForbidden)
 			j, _ := json.Marshal(struct{ Err string }{Err: "Invalid Password"})
 			w.Write(j)