diff --git a/defaults/desktop/security.nix b/defaults/desktop/security.nix
index 65d5bcc..a37dbed 100644
--- a/defaults/desktop/security.nix
+++ b/defaults/desktop/security.nix
@@ -7,4 +7,10 @@
 
 {
   services.pcscd.enable = true;
+
+  # Make pam accept both password and fingerprint
+  security.pam.services.swaylock.rules.auth = {
+    fprintd.order = 11600;
+    unix.args = [ "nullok" ];
+  };
 }