diff --git a/changelog.d/1600-load-chip-key-required.md b/changelog.d/1600-load-chip-key-required.md
new file mode 100644
index 000000000..36c242560
--- /dev/null
+++ b/changelog.d/1600-load-chip-key-required.md
@@ -0,0 +1,4 @@
+- A layer that is only waiting for a key now ends the load chip on an amber
+  `KEY REQUIRED` instead of a red `LOAD FAILED`, so a keyless Environmental
+  first run no longer reports a failure while earthquakes load. A real error
+  still wins over a missing key (asturksever, #1600).