diff --git a/Dockerfile b/Dockerfile
index 9e80c31d..b25041db 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,9 @@
 FROM  node:10-alpine
 MAINTAINER OhMyForm <admin@ohmyform.com>
 
+# Create a group and a user with name "ohmyformUser".
+RUN addgroup -g 9999 ohmyformGroup && adduser -u 99999 -D -g ohmyformGroup ohmyformUser
+
 # Install some needed packages
 RUN apk add --no-cache git python \
 	&& rm -rf /tmp/* \
@@ -48,5 +51,8 @@ RUN npm install --only=production \
     && bower install --allow-root -f \
     && grunt build
 
+# Change to non-root privilege
+USER ohmyformUser
+
 # Run OhMyForm server
 CMD ["node", "server.js"]