diff --git a/systems/x86_64-linux/LoyAdjo/default.nix b/systems/x86_64-linux/LoyAdjo/default.nix
index 25300f6..7a47730 100644
--- a/systems/x86_64-linux/LoyAdjo/default.nix
+++ b/systems/x86_64-linux/LoyAdjo/default.nix
@@ -70,10 +70,16 @@
     ];
     dotoolXkbLayout = "de";
   };
+
+  # Security
+  security.rtkit.enable = true; # For Sound
+  security.pam.services = {
+    login.u2fAuth = true;
+    sudo.u2fAuth = true;
+  };
   
   # Output
   services.pulseaudio.enable = false;
-  security.rtkit.enable = true;
   services.pipewire = {
     enable = true;
     alsa.enable = true;
diff --git a/systems/x86_64-linux/LoyAdjo/hardware.nix b/systems/x86_64-linux/LoyAdjo/hardware.nix
index 3abae9b..073e59a 100644
--- a/systems/x86_64-linux/LoyAdjo/hardware.nix
+++ b/systems/x86_64-linux/LoyAdjo/hardware.nix
@@ -32,6 +32,7 @@
     };
 
   boot.initrd.luks.devices."luks-11c71284-504f-4b84-a944-265ad793b139".device = "/dev/disk/by-uuid/11c71284-504f-4b84-a944-265ad793b139";
+  boot.initrd.luks.devices."luks-11c71284-504f-4b84-a944-265ad793b139".crypttabExtraOpts = ["fido2-device=auto"];
 
   fileSystems."/boot" =
     { device = "/dev/disk/by-uuid/3C1C-72D5";