diff --git a/MetadataCrypt.cpp b/MetadataCrypt.cpp
index 3026611..785e160 100644
--- a/MetadataCrypt.cpp
+++ b/MetadataCrypt.cpp
@@ -297,6 +297,8 @@
         }
         options.cipher = legacy_aes_256_xts;
         options.use_legacy_options_format = true;
+        if (is_metadata_wrapped_key_supported())
+            options.use_hw_wrapped_key = true;
         options.set_dun = android::base::GetBoolProperty("ro.crypto.set_dun", false);
         if (!options.set_dun && data_rec->fs_mgr_flags.checkpoint_blk) {
             LOG(ERROR)