diff --git a/src/main/java/org/cryptomator/common/recovery/RecoveryDirectory.java b/src/main/java/org/cryptomator/common/recovery/RecoveryDirectory.java
index c1f82e762..63dd61ac6 100644
--- a/src/main/java/org/cryptomator/common/recovery/RecoveryDirectory.java
+++ b/src/main/java/org/cryptomator/common/recovery/RecoveryDirectory.java
@@ -1,6 +1,8 @@
 package org.cryptomator.common.recovery;
 
 import java.io.IOException;
+import java.nio.file.attribute.PosixFilePermissions;
+import java.nio.file.attribute.FileAttribute;
 import java.nio.file.Files;
 import java.nio.file.Path;
 import java.nio.file.StandardCopyOption;
@@ -25,7 +27,10 @@ public final class RecoveryDirectory implements AutoCloseable {
 	}
 
 	public static RecoveryDirectory create(Path vaultPath) throws IOException {
-		Path tempDir = Files.createTempDirectory("r");
+		FileAttribute<?> attr = PosixFilePermissions.asFileAttribute(
+				PosixFilePermissions.fromString("rwx------")
+		);
+		Path tempDir = Files.createTempDirectory("r", attr);
 		return new RecoveryDirectory(vaultPath, tempDir);
 	}