diff --git a/functions b/functions
index bfc182e..dd1ac10 100755
--- a/functions
+++ b/functions
@@ -372,6 +372,7 @@ service_create() {
   password=$(openssl rand -hex 16)
   echo "$rootpassword" > "$SERVICE_ROOT/ROOTPASSWORD"
   echo "$password" > "$SERVICE_ROOT/PASSWORD"
+  chmod 640 "$SERVICE_ROOT/ROOTPASSWORD" "$SERVICE_ROOT/PASSWORD"
   touch "$LINKS_FILE"
 
   if [[ -n $MONGO_CUSTOM_ENV ]]; then