diff --git a/machine-confs/helium.nix b/machine-confs/helium.nix
index 74e8a8e..a4f6d3b 100644
--- a/machine-confs/helium.nix
+++ b/machine-confs/helium.nix
@@ -93,6 +93,14 @@
   ];
 
   boot = {
+    loader.timeout = 10;
+    initrd.luks = {
+      fido2Support = true;
+      devices."luks-f6e1979b-0dee-4ee9-8170-10490019854b".fido2 = {
+        passwordLess = true;
+        credential = "df9233221fa09173fea61d8b8516d184f8ede475024a88201b34d838ecf306ee070052dae2262619c1da2be7562ec9dd94888c71a9326fea70dfe16214b5ea8ec014d86afa01";
+      };
+    };
     resumeDevice = "/dev/mapper/luks-f6e1979b-0dee-4ee9-8170-10490019854b";
     kernelParams = [ "resume_offset=44537856" ];
   };
diff --git a/machine-confs/lithium.nix b/machine-confs/lithium.nix
index ae7227b..b8e8c45 100644
--- a/machine-confs/lithium.nix
+++ b/machine-confs/lithium.nix
@@ -69,6 +69,14 @@
   ];
 
   boot = {
+    loader.timeout = 10;
+    initrd.luks = {
+      fido2Support = true;
+      devices."nixos".fido2 = {
+        passwordLess = true;
+        credential = "f29b0760a6ec3b18b0a9958d77d8be8b15ff4fd90d42c3ceaeeb5d24a19c8f81315f52dae2262619c1da2be7562ec9dd94888c71a9326fea70dfe16214b5ea8ec014225afa01";
+      };
+    };
     resumeDevice = "/dev/mapper/nixos";
     kernelParams = [ "resume_offset=39292928" ];
   };