diff --git a/stages/org.osbuild.users b/stages/org.osbuild.users
index 67ba93d7..3c593a75 100755
--- a/stages/org.osbuild.users
+++ b/stages/org.osbuild.users
@@ -68,6 +68,7 @@ def add_ssh_key(root, user, key):
         f.write(f"{key}\n")
 
     os.chown(authorized_keys, int(uid), int(gid))
+    os.chmod(authorized_keys, 0o600)
 
 
 def main(tree, options):