diff --git a/docker/routlin-dash/app/pages/networklayout/content.json b/docker/routlin-dash/app/pages/networklayout/content.json
index 15e3f37..72b99d0 100644
--- a/docker/routlin-dash/app/pages/networklayout/content.json
+++ b/docker/routlin-dash/app/pages/networklayout/content.json
@@ -264,7 +264,7 @@
               "label": "RADIUS Default",
               "name": "radius_default",
               "input_type": "checkbox",
-              "hint": "Clients without a DHCP reservation will be placed into this VLAN (requires layer 3 switch). Note: current default is %RADIUS_DEFAULT_VLAN%."
+              "hint": "Clients without a DHCP reservation will be placed into this VLAN. Note: current default is %RADIUS_DEFAULT_VLAN%."
             },
             {
               "type": "field",
diff --git a/routlin/core.py b/routlin/core.py
index 09d8b72..5d0db45 100644
--- a/routlin/core.py
+++ b/routlin/core.py
@@ -1821,7 +1821,7 @@ def ensure_radius_secret():
     import secrets as _secrets
     secret = _secrets.token_urlsafe(32)
     RADIUS_SECRET_FILE.write_text(secret + "\n")
-    RADIUS_SECRET_FILE.chmod(0o600)
+    RADIUS_SECRET_FILE.chmod(0o644)
     print(f"Generated RADIUS shared secret: {RADIUS_SECRET_FILE}")
     return secret