diff --git a/entropy/nixos/configuration.nix b/entropy/nixos/configuration.nix
index 9ba787b..d73288c 100644
--- a/entropy/nixos/configuration.nix
+++ b/entropy/nixos/configuration.nix
@@ -100,6 +100,11 @@ in
     }
   ];
 
+  security.pam.u2f = {
+    enable = true;
+    cue = true;
+  };
+
   programs.gnupg.agent = {
     enable = true;
     enableSSHSupport = true;