diff --git a/modules/users.nix b/modules/users.nix
index 3de209e..b7d92f3 100644
--- a/modules/users.nix
+++ b/modules/users.nix
@@ -44,7 +44,7 @@
       }"
     }"'';
   security.pam.u2f = {
-    control = "sufficient";
+    control = "required";
     cue = true;
     enable = true;
   };