diff --git a/build/raspberry-pi/initialization.sh b/build/raspberry-pi/initialization.sh
index 86d633feb..3f9f78a42 100755
--- a/build/raspberry-pi/initialization.sh
+++ b/build/raspberry-pi/initialization.sh
@@ -4,7 +4,7 @@ set -e
 # introduce start9 username and embassy as default password
 if ! awk -F: '{ print $1 }' /etc/passwd | grep start9
 then
-	usermod -l start9 -d /home/start9 -aG embassy -m pi
+	usermod -l start9 -d /home/start9 -m pi
 	groupmod --new-name start9 pi
 	echo start9:embassy | chpasswd
 fi
@@ -42,6 +42,8 @@ systemctl stop tor
 
 . /usr/lib/embassy/scripts/postinst
 
+usermod -aG embassy start9
+
 systemctl enable embassyd.service embassy-init.service
 
 # . /usr/lib/embassy/scripts/enable-kiosk