diff --git a/system/default.nix b/system/default.nix
index 9d61f9b..54232e0 100644
--- a/system/default.nix
+++ b/system/default.nix
@@ -65,6 +65,10 @@
     };
     audit.enable = true;
     auditd.enable = true;
+    pam.services = {
+      login.u2fAuth = true;
+      sudo.u2fAuth = true;
+    };
     polkit.enable = true;
     rtkit.enable = true;
     tpm2 = {
diff --git a/users/default.nix b/users/default.nix
index 257aab1..acfc906 100644
--- a/users/default.nix
+++ b/users/default.nix
@@ -4,7 +4,6 @@ let
   user = import ./user.nix;
 in
 {
-  services.getty.autologinUser = user.primary.userName;
   users.mutableUsers = false;
   users.users = {
     root.hashedPassword = user.root.hashedPassword;