diff --git a/signup/signup-handler.php b/signup/signup-handler.php
index 86ddb1c..75f00d6 100644
--- a/signup/signup-handler.php
+++ b/signup/signup-handler.php
@@ -72,7 +72,7 @@ if (isset($_REQUEST["username"]) && isset($_REQUEST["email"])) {
if (!preg_match('/^[a-z][a-z0-9]{2,31}$/', $name))
$message .= "
username contains invalid characters (lowercase only, must start with a letter)";
- if ($_REQUEST["sshkey"] == "")
+ if ($_REQUEST["sshkey"] == "" || mb_substr($_REQUEST["sshkey"], 0, 4) !== "ssh-")
$message .= 'ssh key required: please create one and submit the public key. '
. 'see our ssh wiki or '
. 'hop on irc and ask for help';