diff --git a/src/commands/ssh/sign.sh b/src/commands/ssh/sign.sh
index bbe6e5c..b927c56 100644
--- a/src/commands/ssh/sign.sh
+++ b/src/commands/ssh/sign.sh
@@ -20,6 +20,9 @@ wx-ssh-sign(){
 }
 
 wx-ssh-sign-create(){
+    mkdir -p $HOME/.ssh/keys
+    chmod 600 $HOME/.ssh/keys
+
     NAME=$1
     ROLE=$2
     PRINCIPALS=$2
@@ -27,7 +30,6 @@ wx-ssh-sign-create(){
 
     if [[ ! -f "$HOME/.ssh/keys/$NAME-ed25519" ]]
     then
-        mkdir -p $HOME/.ssh/keys
         ssh-keygen -t ed25519 -f $HOME/.ssh/keys/$NAME-ed25519 -q -N "" &> /dev/null
     fi
 
diff --git a/wx b/wx
index b73990b..91941f9 100755
--- a/wx
+++ b/wx
@@ -384,6 +384,9 @@ wx-ssh-sign(){
 }
 
 wx-ssh-sign-create(){
+    mkdir -p $HOME/.ssh/keys
+    chmod 600 $HOME/.ssh/keys
+
     NAME=$1
     ROLE=$2
     PRINCIPALS=$2
@@ -391,7 +394,6 @@ wx-ssh-sign-create(){
 
     if [[ ! -f "$HOME/.ssh/keys/$NAME-ed25519" ]]
     then
-        mkdir -p $HOME/.ssh/keys
         ssh-keygen -t ed25519 -f $HOME/.ssh/keys/$NAME-ed25519 -q -N "" &> /dev/null
     fi