diff --git a/Dockerfile b/Dockerfile
index 3d3ce5a..e7a9c93 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -37,5 +37,8 @@ RUN . /etc/os-release && \
 
 COPY --from=build /build/pgweb /usr/bin/pgweb
 
+RUN useradd --uid 1000 --no-create-home --shell /bin/false pgweb
+USER pgweb
+
 EXPOSE 8081
 ENTRYPOINT ["/usr/bin/pgweb", "--bind=0.0.0.0", "--listen=8081"]