diff --git a/main.py b/main.py
index 32606cce..a94a465e 100644
--- a/main.py
+++ b/main.py
@@ -172,6 +172,7 @@ if __name__ == "__main__":
             encoding="utf-8",
         ) as f:
             f.write(json.dumps({"username": "admin", "password": password}, indent=4))
+        os.chmod(os.path.join(app_path, "app", "config", "default-creds.txt"), 0o600)
     else:
         Console.debug("Existing install detected")
     Console.info("Checking for reset secret flag")