diff --git a/src/users.js b/src/users.js
index 2ac569db3..64bf4663a 100644
--- a/src/users.js
+++ b/src/users.js
@@ -686,7 +686,7 @@ function addAppPassword(userId, identifier, name, callback) {
     let error = validateAppPasswordName(name);
     if (error) return callback(error);
 
-    if (identifier.length < 1) return new BoxError(BoxError.BAD_FIELD, 'identifier must be atleast 1 char');
+    if (identifier.length < 1) return callback(new BoxError(BoxError.BAD_FIELD, 'identifier must be atleast 1 char'));
 
     const password = hat(8 * 4);
     const hashedPassword = crypto.createHash('sha256').update(password).digest('base64');