diff --git a/libexec/sourcezap/scripts/setup-user b/libexec/sourcezap/scripts/setup-user
index da2048d..00804ca 100755
--- a/libexec/sourcezap/scripts/setup-user
+++ b/libexec/sourcezap/scripts/setup-user
@@ -21,7 +21,7 @@ else
        -n "${user}" \
        -c "sourcezap user" \
        -m \
+       -M $("${libexec}"/scripts/get-default-umask) \
        -s /sbin/nologin
-    chmod u=rwX,g=rX,o= /home/"${user}"/
     printok "${user} user created"
 fi
diff --git a/share/sourcezap/CHANGELOG b/share/sourcezap/CHANGELOG
index 8fe29aa..51d8056 100644
--- a/share/sourcezap/CHANGELOG
+++ b/share/sourcezap/CHANGELOG
@@ -1,5 +1,12 @@
 # -*- mode: org -*-
 
+* vNEXT
+
+**** Replace chmod with -M switch
+This change replaces chmod with the -M switch. The -M switch
+is given to the ~pw useradd~ command in the ~setup-user~
+script
+
 * v1.2.0
 
 **** Fix ~libexec/sourcezap/scripts/setup-doas~ bug