diff --git a/install.sh b/install.sh
index 213172549..ca5195690 100755
--- a/install.sh
+++ b/install.sh
@@ -375,8 +375,7 @@ install_binary() {
   fi
   echo "Installing backrest to /usr/local/bin"
   sudo mkdir -p /usr/local/bin
-  sudo cp "$src" /usr/local/bin/backrest
-  sudo chmod +x /usr/local/bin/backrest
+  sudo install -m 755 "$src" /usr/local/bin/backrest
 }
 
 # =============================================================================
diff --git a/internal/resticinstaller/resticinstaller.go b/internal/resticinstaller/resticinstaller.go
index 0f1bba2f3..c04c35219 100644
--- a/internal/resticinstaller/resticinstaller.go
+++ b/internal/resticinstaller/resticinstaller.go
@@ -10,7 +10,7 @@ var (
 )
 
 var (
-	RequiredResticVersion = "0.18.1"
+	RequiredResticVersion = "0.19.0"
 
 	requiredVersionSemver = mustParseSemVer(RequiredResticVersion)
 
diff --git a/webui/src/features/repositories/AddRepoModal.tsx b/webui/src/features/repositories/AddRepoModal.tsx
index 994f1c0bc..3d70cf6ee 100644
--- a/webui/src/features/repositories/AddRepoModal.tsx
+++ b/webui/src/features/repositories/AddRepoModal.tsx
@@ -1152,6 +1152,7 @@ const expectedEnvVars: { [scheme: string]: string[][] } = {
 
 const envVarSetValidator = async (formData: any) => {
   const envVars = formData.env || [];
+  const flags = formData.flags || [];
   const uri = formData.uri;
 
   if (!uri) {
@@ -1170,7 +1171,8 @@ const envVarSetValidator = async (formData: any) => {
     (!password || password.length === 0) &&
     !envVarNames.includes("RESTIC_PASSWORD") &&
     !envVarNames.includes("RESTIC_PASSWORD_COMMAND") &&
-    !envVarNames.includes("RESTIC_PASSWORD_FILE")
+    !envVarNames.includes("RESTIC_PASSWORD_FILE") &&
+    !flags.includes("--insecure-no-password")
   ) {
     throw new Error(m.add_repo_modal_error_missing_password());
   }