diff --git a/commands b/commands
index 536ba7c..6fec585 100755
--- a/commands
+++ b/commands
@@ -28,6 +28,7 @@ case "$1" in
     mkdir -p "$SERVICE_ROOT" || dokku_log_fail "Unable to create service directory"
     password=$(openssl rand -hex 16)
     echo "$password" > "$SERVICE_ROOT/PASSWORD"
+    chmod 640 "$SERVICE_ROOT/PASSWORD"
     touch "$LINKS_FILE"
 
     dokku_log_info1 "Starting container"