diff --git a/nixos/common/modules/yubikey-auth.nix b/nixos/common/modules/yubikey-auth.nix
index 0ec0a551..fb48a438 100644
--- a/nixos/common/modules/yubikey-auth.nix
+++ b/nixos/common/modules/yubikey-auth.nix
@@ -10,6 +10,7 @@
   
   sops.secrets."yubikey/albert-18550256" = {
     owner = "root";
+    mode = "600";
     sopsFile = ../../../secrets/yubikey.yaml;
   };