diff --git a/src/.local/bin/identity.sh b/src/.local/bin/identity.sh
index ca27a1f..6dc1aad 100755
--- a/src/.local/bin/identity.sh
+++ b/src/.local/bin/identity.sh
@@ -19,5 +19,7 @@
 # this script takes these secret files and deploys them to the system
 # you need to have keepassxc running to use it
 
-secret-tool lookup Title "conf-aerc-accounts" > .config/aerc/accounts.conf
-secret-tool lookup Title "conf-identity" > .config/identity
+secret-tool lookup Title "conf-aerc-accounts" > ~/.config/aerc/accounts.conf
+chmod 600 ~/.config/aerc/accounts.conf
+secret-tool lookup Title "conf-identity" > ~/.config/identity
+chmod 600 ~/.config/identity