diff --git a/command/server.go b/command/server.go
index 7b732cd477bc..a390e4474893 100644
--- a/command/server.go
+++ b/command/server.go
@@ -1245,7 +1245,7 @@ func (c *ServerCommand) storePidFile(pidPath string) error {
 	}
 
 	// Open the PID file
-	pidFile, err := os.OpenFile(pidPath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0666)
+	pidFile, err := os.OpenFile(pidPath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0644)
 	if err != nil {
 		return fmt.Errorf("could not open pid file: %v", err)
 	}
diff --git a/website/source/docs/configuration/index.html.md b/website/source/docs/configuration/index.html.md
index e50b5f49f425..2cc60ddbde52 100644
--- a/website/source/docs/configuration/index.html.md
+++ b/website/source/docs/configuration/index.html.md
@@ -105,8 +105,8 @@ to specify where the configuration is.
   the standard Vault API address will automatically redirect there. This can also
   be provided via the environment variable `VAULT_UI`.
 
-- `pid_file` `(string: "")` - Path to the file in which Vault server PID should
-  be stored.
+- `pid_file` `(string: "")` - Path to the file in which the Vault server's
+  Process ID (PID) should be stored.
 
 [storage-backend]: /docs/configuration/storage/index.html
 [listener]: /docs/configuration/listener/index.html