diff --git a/apps/vault/src/vendor_commands.rs b/apps/vault/src/vendor_commands.rs
index 1ca6a0b1c..4ed3273c4 100644
--- a/apps/vault/src/vendor_commands.rs
+++ b/apps/vault/src/vendor_commands.rs
@@ -8,9 +8,9 @@ use crate::{
 };
 
 // Vault-specific command to upload TOTP codes
-pub const COMMAND_RESTORE_TOTP_CODES: u8 = 0x41;
-pub const COMMAND_BACKUP_TOTP_CODES: u8 = 0x42;
-pub const COMMAND_RESET_SESSION: u8 = 0x44;
+pub const COMMAND_RESTORE_TOTP_CODES: u8 = 0x71;
+pub const COMMAND_BACKUP_TOTP_CODES: u8 = 0x72;
+pub const COMMAND_RESET_SESSION: u8 = 0x74;
 
 // TODO(gsora): add something that checks whether or not a command works.
 
diff --git a/apps/vault/tools/vaultbackup-rs/src/main.rs b/apps/vault/tools/vaultbackup-rs/src/main.rs
index 600bd53e5..099970a06 100644
--- a/apps/vault/tools/vaultbackup-rs/src/main.rs
+++ b/apps/vault/tools/vaultbackup-rs/src/main.rs
@@ -92,7 +92,7 @@ fn main() -> Result<()> {
     let device = ctaphid::Device::connect(&ha, precursor.unwrap())?;
     log::info!("connected!");
 
-    device.vendor_command(ctaphid::command::VendorCommand::H44, &vec![])?;
+    device.vendor_command(ctaphid::command::VendorCommand::H74, &vec![])?;
     log::debug!("sent session reset command");
 
     let start = Instant::now();
@@ -108,7 +108,7 @@ fn main() -> Result<()> {
                     let ops: u8 = (&pt).into();
 
                     let wire_data = match device
-                        .vendor_command(ctaphid::command::VendorCommand::H42, &vec![ops])
+                        .vendor_command(ctaphid::command::VendorCommand::H72, &vec![ops])
                     {
                         Ok(we) => we,
 
@@ -159,7 +159,7 @@ fn main() -> Result<()> {
                 let chunk = &chunk;
                 let chunk_bytes: Vec<u8> = chunk.into();
                 let vcres =
-                    device.vendor_command(ctaphid::command::VendorCommand::H41, &chunk_bytes)?;
+                    device.vendor_command(ctaphid::command::VendorCommand::H71, &chunk_bytes)?;
 
                 if vcres.eq(backup::CONTINUE_RESPONSE) {
                     log::debug!("received CONTINUE response");