diff --git a/common/generic-desktop.nix b/common/generic-desktop.nix
index 8d889e1..423d33c 100644
--- a/common/generic-desktop.nix
+++ b/common/generic-desktop.nix
@@ -16,5 +16,10 @@
   };
   boot.initrd.systemd.enable = true;
 
+  security.pam.services = {
+    login.u2fAuth = true;
+    sudo.u2fAuth = true;
+  };
+
   programs.adb.enable = true;
 }
diff --git a/hosts/alex/configuration.nix b/hosts/alex/configuration.nix
index a338f03..820b34b 100644
--- a/hosts/alex/configuration.nix
+++ b/hosts/alex/configuration.nix
@@ -30,6 +30,11 @@
     pulse.enable = true;
   };
 
+  security.pam.services = {
+    kde.u2fAuth = true;
+    sddm.u2fAuth = true;
+  };
+
   services.xserver = {
     enable = true;
 #    displayManager.gdm.enable = true;