diff --git a/src/Passport.php b/src/Passport.php
index 503e650f..99b64d2e 100644
--- a/src/Passport.php
+++ b/src/Passport.php
@@ -20,7 +20,7 @@ class Passport
     /**
      * Indicates if Passport should validate the permissions of its encryption keys.
      */
-    public static bool $validateKeyPermissions = false;
+    public static bool $validateKeyPermissions = true;
 
     /**
      * Indicates if the implicit grant type is enabled.
diff --git a/src/PassportServiceProvider.php b/src/PassportServiceProvider.php
index d2abfd45..f62a03fc 100644
--- a/src/PassportServiceProvider.php
+++ b/src/PassportServiceProvider.php
@@ -254,7 +254,7 @@ protected function makeCryptKey(string $type): CryptKey
             $key = 'file://'.Passport::keyPath('oauth-'.$type.'.key');
         }
 
-        return new CryptKey($key, null, Passport::$validateKeyPermissions && ! windows_os());
+        return new CryptKey($key, null, Passport::$validateKeyPermissions);
     }
 
     /**