diff --git a/zkey/zkey.c b/zkey/zkey.c
index 351c5eca..3b655518 100644
--- a/zkey/zkey.c
+++ b/zkey/zkey.c
@@ -1108,6 +1108,8 @@ int main(int argc, char *argv[])
 			goto out;
 	}
 
+	umask(S_IRWXG|S_IRWXO);
+
 	rc = command->function(keyfile);
 
 out: