diff --git a/configuration.nix b/configuration.nix
index c256989..932364d 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -123,7 +123,10 @@
 		nix-ld.enable = true;
 	};
 
-	security.sudo.wheelNeedsPassword = false;
+	security.pam.services = {
+		login.u2fAuth = true;
+		sudo.u2fAuth = true;
+	};
 
 	services = {
 		flatpak.enable = true;