diff --git a/zkey/zkey.c b/zkey/zkey.c
index 3b655518..a9960386 100644
--- a/zkey/zkey.c
+++ b/zkey/zkey.c
@@ -1108,7 +1108,7 @@ int main(int argc, char *argv[])
 			goto out;
 	}
 
-	umask(S_IRWXG|S_IRWXO);
+	umask(0077);
 
 	rc = command->function(keyfile);