diff --git a/internal/config/config.go b/internal/config/config.go
index 44573a710163f2ba5c8912c23af7024f28bcaa51..b4682ce876bb4980bbe119c187538bf467d2f514 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -371,7 +371,7 @@ func (c *Config) SetConfigField(key string, value any) error {
 	if err != nil {
 		return fmt.Errorf("failed to set config field %s: %w", key, err)
 	}
-	if err := os.WriteFile(c.dataConfigDir, []byte(newValue), 0o644); err != nil {
+	if err := os.WriteFile(c.dataConfigDir, []byte(newValue), 0o600); err != nil {
 		return fmt.Errorf("failed to write config file: %w", err)
 	}
 	return nil