diff --git a/openvpn/start.sh b/openvpn/start.sh
index 36bde8c..e13bfbe 100755
--- a/openvpn/start.sh
+++ b/openvpn/start.sh
@@ -41,6 +41,7 @@ else
   mkdir -p /config
   echo $OPENVPN_USERNAME > /config/openvpn-credentials.txt
   echo $OPENVPN_PASSWORD >> /config/openvpn-credentials.txt
+  chmod 600 /config/openvpn-credentials.txt
 fi
 
 # add transmission credentials from env vars