diff --git a/defaults/desktop/hardware.nix b/defaults/desktop/hardware.nix
index 554b28e..f13551f 100644
--- a/defaults/desktop/hardware.nix
+++ b/defaults/desktop/hardware.nix
@@ -50,4 +50,13 @@
 
   programs.light.enable = true;
   programs.adb.enable = true;
+
+  services.fprintd = {
+    enable = true;
+    package = pkgs.fprintd-tod;
+    tod = {
+      enable = true;
+      driver = pkgs.libfprint-2-tod1-vfs0090;
+    };
+  };
 }
diff --git a/defaults/desktop/security.nix b/defaults/desktop/security.nix
index 65d5bcc..a4330be 100644
--- a/defaults/desktop/security.nix
+++ b/defaults/desktop/security.nix
@@ -7,4 +7,12 @@
 
 {
   services.pcscd.enable = true;
+
+  security.pam.services.swaylock = {
+    text = ''
+      auth sufficient pam_unix.so try_first_pass likeauth nullok
+      auth sufficient pam_fprintd.so
+      auth include login
+    '';
+  };
 }
diff --git a/home/fhauser/applications/swaylock.nix b/home/fhauser/applications/swaylock.nix
index 6b5d172..c2b59fb 100644
--- a/home/fhauser/applications/swaylock.nix
+++ b/home/fhauser/applications/swaylock.nix
@@ -2,7 +2,7 @@
 {
   systemd.user.services.swayidle =
     let
-      lock = "${pkgs.swaylock}/bin/swaylock --hide-keyboard-layout --ignore-empty-password --daemonize --show-failed-attempts --color=000000";
+      lock = "${pkgs.swaylock}/bin/swaylock --hide-keyboard-layout --daemonize --show-failed-attempts --color=000000";
       logTimeCmd = "${pkgs.coreutils}/bin/date --rfc-3339=seconds >> ~/locklog";
       idleCmd = (action: ''${pkgs.sway}/bin/swaymsg "output * dpms ${action}" && ${logTimeCmd}'');
       timeout-screens-off = 600;