diff --git a/getssl b/getssl
index 4db3ded..93524f9 100755
--- a/getssl
+++ b/getssl
@@ -126,10 +126,11 @@
 # 2016-10-17 updated info comment on failed cert due to rate limits. (1.60)
 # 2016-10-17 fix error messages when using 1.0.1e-fips  (1.61)
 # 2016-10-20 set secure permissions when generating account key (1.62)
+# 2016-10-20 set permsissions to 700 for getssl script during upgrade (1.63)
 # ----------------------------------------------------------------------------------------
 
 PROGNAME=${0##*/}
-VERSION="1.62"
+VERSION="1.63"
 
 # defaults
 CODE_LOCATION="https://raw.githubusercontent.com/srvrco/getssl/master/getssl"
@@ -248,7 +249,7 @@ check_getssl_upgrade() { # check if a more recent version of code is available a
       temp_upgrade="$(mktemp)"
       echo "$latestcode" > "$temp_upgrade"
       install "$0" "${0}.v${VERSION}"
-      install "$temp_upgrade" "$0"
+      install "$temp_upgrade" "$0" -m 700
       rm -f "$temp_upgrade"
       if [ ${_MUTE} -eq 0 ]; then
         echo "Updated getssl from v${VERSION} to v${latestversion}"