diff --git a/.gitignore b/.gitignore
index c3c8a8b..23a3dc6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,4 +4,5 @@ dist/
 *.db
 .env
 config.json
+cookies/
 .superpowers/
diff --git a/src/music/auth.ts b/src/music/auth.ts
index 7d33e1c..b71bc75 100644
--- a/src/music/auth.ts
+++ b/src/music/auth.ts
@@ -17,7 +17,7 @@ export function createCookieStore(cookieDir: string): CookieStore {
       fs.writeFileSync(
         filePath,
         JSON.stringify({ cookie, updatedAt: new Date().toISOString() }),
-        "utf-8"
+        { encoding: "utf-8", mode: 0o600 }
       );
     },