diff --git a/cli/app/secret.go b/cli/app/secret.go
index 31b86c23..67643937 100644
--- a/cli/app/secret.go
+++ b/cli/app/secret.go
@@ -92,6 +92,10 @@ var appSecretGenerateCommand = cli.Command{
 			logrus.Fatal(err)
 		}
 
+		if err := secret.EnsureSecretLengths(secretsConfig, internal.Domain, config.SanitiseAppName(app.Name)); err != nil {
+			logrus.Fatal(err)
+		}
+
 		secretsToCreate := make(map[string]string)
 		if allSecrets {
 			secretsToCreate = secretsConfig