diff --git a/nixos/imports/security.nix b/nixos/imports/security.nix
index 667a61e..d78c253 100644
--- a/nixos/imports/security.nix
+++ b/nixos/imports/security.nix
@@ -1,5 +1,17 @@
 {...}: {
   security = {
     rtkit.enable = true;
+    pam = {
+      u2f = {
+        enable = true;
+        settings = {
+          cue = true;
+        };
+      };
+      services = {
+        sudo.u2fAuth = true;
+        login.u2fAuth = true;
+      };
+    };
   };
 }