diff --git a/nixos-infect b/nixos-infect
index e0c86db..95b35c4 100755
--- a/nixos-infect
+++ b/nixos-infect
@@ -64,6 +64,7 @@ makeConf() {
     "username": "$LUSER"
 }
 EOF
+  chmod 0600 /etc/nixos/userdata/userdata.json
 
   if isEFI; then
     bootcfg=$(cat << EOF