diff --git a/src/tomb b/src/tomb
index f3300b2..9922e36 100755
--- a/src/tomb
+++ b/src/tomb
@@ -442,7 +442,7 @@ create_tomb() {
 
     # set permissions on the tomb
     sudo chown $UID:$GID ${tombfile}
-    sudo chmod go-rwx ${tombfile}
+    sudo chmod 600 ${tombfile}
 
     act "done creating $tombname encrypted storage (using Luks dm-crypt AES/SHA256)"
     notice "Your tomb is ready in ${tombdir}/${tombfile} and secured with key ${tombfile}.key"
diff --git a/src/tomb-open b/src/tomb-open
index 863f791..de11041 100755
--- a/src/tomb-open
+++ b/src/tomb-open
@@ -221,7 +221,7 @@ if [ $1 ]; then # is it a file?
 		exit 1
 	    fi
 	else
-	    tomb-notify "Not a real Tomb." "We found no real bones in there."
+	    tomb-notify "Not a real Tomb." "We found no real bones in there, or the tomb file permissions won't allow us in."
 	    exit 1
 	fi