diff --git a/controllers/auth.php b/controllers/auth.php
index f6d357e..e6a2d24 100644
--- a/controllers/auth.php
+++ b/controllers/auth.php
@@ -35,7 +35,7 @@ $app->get('/auth/start', function() use($app) {
   $tokenEndpoint = IndieAuth\Client::discoverTokenEndpoint($me);
   $micropubEndpoint = IndieAuth\Client::discoverMicropubEndpoint($me);
 
-  $defaultScope = 'create update';
+  $defaultScope = 'create update media';
 
   if($tokenEndpoint && $micropubEndpoint && $authorizationEndpoint) {
     // Generate a "state" parameter for the request