diff --git a/scripts/node.sh b/scripts/node.sh
index 5d6b27539..5f5a383e5 100755
--- a/scripts/node.sh
+++ b/scripts/node.sh
@@ -810,6 +810,7 @@ read_bls_pass() {
          unset -v passphrase
          read -rsp "Enter passphrase for the BLS key file $f: " passphrase
          echo ${passphrase} | tee $passfile
+         chmod og-wr $passfile
          echo "Passphrase is temporarely saved to: $passfile"
          prompt_save=true
       fi