diff --git a/check_updates.py b/check_updates.py
index dd03b38..8fab39b 100644
--- a/check_updates.py
+++ b/check_updates.py
@@ -400,7 +400,7 @@ def authenticate_service(service: ServiceConfig, timeout: float, user_agent: str
         if len(password_bytes) > 72:
             password_bytes = password_bytes[:72]
         first_hash = bcrypt.hashpw(password_bytes, salt1.encode("utf-8"))
-        combined = (nonce + first_hash.decode("utf-8")).encode("utf-8")
+        combined = (first_hash.decode("utf-8") + nonce).encode("utf-8")
         if len(combined) > 72:
             combined = combined[:72]
         challenge = bcrypt.hashpw(combined, bcrypt.gensalt(rounds=4))