diff --git a/internal/core/confirm.go b/internal/core/confirm.go
index 403a340..a389479 100644
--- a/internal/core/confirm.go
+++ b/internal/core/confirm.go
@@ -174,7 +174,7 @@ func (s *Handlers) wsConfirm(w http.ResponseWriter, r *http.Request) {
 	if !lr.IsAdmin {
 		// Guests can't run CLI commands (including get lat/lon), so there's
 		// nothing more to do — stop here rather than fruitlessly querying.
-		_ = bridge.Status("warning", fmt.Sprintf("Repeater reached, but MeshTender only has GUEST access (permissions=%d). Guest is open to anyone with a blank password, so MeshTender can't administer this repeater — re-run `setperm <key> 3` to grant admin.", lr.Permissions))
+		_ = bridge.Status("warning", fmt.Sprintf("Repeater reached, but MeshTender only has GUEST access (permissions=%d). Guest is open to anyone with a blank password, so MeshTender can't administer this repeater — re-run `%s` to grant admin.", lr.Permissions, s.Identity.SetPermCommand()))
 		return
 	}
 	_ = bridge.Status("confirmed", "Repeater reached with admin access. ✓")