diff --git a/setup.go b/setup.go
index ec6d10a..59db17c 100644
--- a/setup.go
+++ b/setup.go
@@ -140,7 +140,7 @@ func runSetup(yk *piv.YubiKey) {
 	pub, err := yk.GenerateKey(key, piv.SlotAuthentication, piv.Key{
 		Algorithm:   piv.AlgorithmEC256,
 		PINPolicy:   piv.PINPolicyOnce,
-		TouchPolicy: piv.TouchPolicyAlways,
+		TouchPolicy: piv.TouchPolicyCached,
 	})
 	if err != nil {
 		log.Fatalln("Failed to generate key:", err)