diff --git a/DigitalData.Core.Security/Config/CryptoFactoryParams.cs b/DigitalData.Core.Security/Config/CryptoFactoryParams.cs
index fe6b615..7f63cdd 100644
--- a/DigitalData.Core.Security/Config/CryptoFactoryParams.cs
+++ b/DigitalData.Core.Security/Config/CryptoFactoryParams.cs
@@ -47,17 +47,17 @@ namespace DigitalData.Core.Security.Config
 
         public CryptoFactoryParams()
         {
-            // set defaults
-            var vaultDecryptor = VaultDecryptor is null ? Decryptors.FirstOrDefault() : VaultDecryptor;
-            if (vaultDecryptor is not null)
-                vaultDecryptor.Id = "Vault";
-
-            foreach (var descriptor in TokenDescriptors)
-                descriptor.IdSeparator = FileNameSeparator;
-
             // init decryptors
             AfterCreate += () =>
             {
+                // set default parameters
+                var vaultDecryptor = VaultDecryptor is null ? Decryptors.FirstOrDefault() : VaultDecryptor;
+                if (vaultDecryptor is not null)
+                    vaultDecryptor.Id = "Vault";
+
+                foreach (var descriptor in TokenDescriptors)
+                    descriptor.IdSeparator = FileNameSeparator;
+
                 // Create root folder if it does not exist
                 if (!Directory.Exists(PemDirectory))
                     Directory.CreateDirectory(PemDirectory);