diff --git a/tools/gen-salt.sh b/tools/gen-salt.sh
index 817f0bb..733b2c1 100755
--- a/tools/gen-salt.sh
+++ b/tools/gen-salt.sh
@@ -1,5 +1,10 @@
 #!/usr/bin/sh
 
+if [[ $EUID -ne 0 ]]; then
+    echo "Must run as root!" >&2;
+    exit 1
+fi
+
 if [[ $1 ]]; then
     char_num=$1;
 else