diff --git a/defaults/main.yaml b/defaults/main.yaml
index 80836a5..86883e9 100644
--- a/defaults/main.yaml
+++ b/defaults/main.yaml
@@ -25,7 +25,7 @@ borgmatic_user_home: /root
 borgmatic_file_config_yaml_dest:
   "{{ borgmatic_user_home }}/.config/borgmatic/config.yaml"
 borgmatic_file_config_yaml_group: "{{ borgmatic_user_group }}"
-borgmatic_file_config_yaml_mode: 0644
+borgmatic_file_config_yaml_mode: 0640
 borgmatic_file_config_yaml_owner: "{{ borgmatic_user_name }}"
 borgmatic_file_config_yaml_src: root/.config/borgmatic/config.yaml.j2
 
diff --git a/molecule/tests/test_role.py b/molecule/tests/test_role.py
index a16f0f5..df5c040 100644
--- a/molecule/tests/test_role.py
+++ b/molecule/tests/test_role.py
@@ -27,7 +27,7 @@ def test_borgmatic_config(host):
     assert f.is_file
     assert f.user == 'root'
     assert f.group == 'root'
-    assert f.mode == 0o644
+    assert f.mode == 0o640
     del f