diff --git a/internal/auth/token_save_test.go b/internal/auth/token_save_test.go
index 40614dc..7d7a403 100644
--- a/internal/auth/token_save_test.go
+++ b/internal/auth/token_save_test.go
@@ -3,6 +3,7 @@ package auth
 import (
 	"os"
 	"path/filepath"
+	"runtime"
 	"testing"
 )
 
@@ -10,7 +11,7 @@ func TestSaveXVeraeToken(t *testing.T) {
 	home := t.TempDir()
 	t.Setenv("HOME", home)
 	t.Setenv("USERPROFILE", home) // os.UserHomeDir on Windows
-	t.Setenv("XVERAE_TOKEN", "") // force file path
+	t.Setenv("XVERAE_TOKEN", "")  // force file path
 	if err := SaveXVeraeToken("xVerae-testtoken123"); err != nil {
 		t.Fatal(err)
 	}
@@ -23,7 +24,7 @@ func TestSaveXVeraeToken(t *testing.T) {
 		t.Fatalf("%q", b)
 	}
 	st, _ := os.Stat(p)
-	if st.Mode().Perm()&0o077 != 0 {
+	if runtime.GOOS != "windows" && st.Mode().Perm()&0o077 != 0 { // NTFS uses ACLs, not mode bits
 		t.Fatalf("perms %v", st.Mode())
 	}
 }