diff --git a/configuration.nix b/configuration.nix
index 283960e..5c80b80 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -73,6 +73,13 @@
     polkit.enable = true;
     rtkit.enable = true;
     pam.services.swaylock = { };
+
+    pam.yubico = {
+      enable = true;
+      mode = "challenge-response";
+      id = [ "23664350" ];
+      control = "sufficient";
+    };
   };
 
   environment.systemPackages = with pkgs; [
@@ -87,6 +94,8 @@
     wlr.enable = true;
   };
 
+  services.udev.packages = [ pkgs.yubikey-personalization ];
+
   services.pipewire = {
     enable = true;
     wireplumber.enable = true;