diff --git a/pegleg/cli/commands.py b/pegleg/cli/commands.py
index 14f1da97..39d83196 100644
--- a/pegleg/cli/commands.py
+++ b/pegleg/cli/commands.py
@@ -101,7 +101,7 @@ def lint_repo(*, fail_on_missing_sub_src, exclude_lint, warn_lint):
 @click.option(
     '--decrypt/--no-decrypt',
     'decrypt_repos',
-    default=True,
+    default=False,
     help='Automatically attempts to decrypt repositories before executing '
     'the command. Decryption will happen after repositories are copied to '
     'the temporary directory created by pegleg or the user specified '
diff --git a/pegleg/pegleg_main.py b/pegleg/pegleg_main.py
index a9191a97..994c932e 100644
--- a/pegleg/pegleg_main.py
+++ b/pegleg/pegleg_main.py
@@ -50,7 +50,7 @@ def run_config(
         repo_username,
         extra_repositories,
         run_umask=True,
-        decrypt_repos=True):
+        decrypt_repos=False):
     """Initializes pegleg configuration data
 
     :param site_repository: path or URL for site repository