diff --git a/nixos/configurations/adrastea/default.nix b/nixos/configurations/adrastea/default.nix
index 38c0d7af..026dd6d4 100644
--- a/nixos/configurations/adrastea/default.nix
+++ b/nixos/configurations/adrastea/default.nix
@@ -225,6 +225,10 @@
   # Or disable the firewall altogether.
   networking.firewall.enable = false;
 
+  security.pam.u2f = {
+    enable = true;
+    cue = true;
+  };
 
   security.pam.services = {
     login.u2fAuth = true;