diff --git a/components/esptool_py/project_include.cmake b/components/esptool_py/project_include.cmake
index de0efe407c..cad52a221e 100644
--- a/components/esptool_py/project_include.cmake
+++ b/components/esptool_py/project_include.cmake
@@ -289,13 +289,13 @@ function(esptool_py_partition_needs_encryption retencrypted partition_name)
         #   - DATA 0x01
         # Subtypes:
         #   - ota      0x00
-        #   - nvs      0x02
-        # If the partition is an app, an OTA or an NVS partition, then it should
+        #   - nvs_keys 0x04
+        # If the partition is an app, an OTA or an NVS keys partition, then it should
         # be encrypted
         if(
                 (${type} EQUAL 0) OR
                 (${type} EQUAL 1 AND ${subtype} EQUAL 0) OR
-                (${type} EQUAL 1 AND ${subtype} EQUAL 2)
+                (${type} EQUAL 1 AND ${subtype} EQUAL 4)
           )
             set(encrypted TRUE)
         endif()