diff --git a/.bash.d/env.sh b/.bash.d/env.sh
index 27e0fbd4..50b1a076 100644
--- a/.bash.d/env.sh
+++ b/.bash.d/env.sh
@@ -105,6 +105,7 @@ var(){
 }
 vars(){
     "$EDITOR" "$varfile"
+    chmod -v 0400 "$varfile"
     # shellcheck disable=SC1090
     . "$varfile"
 }