diff --git a/nixos/common/modules/yubikey-auth.nix b/nixos/common/modules/yubikey-auth.nix
index 89cd25e2..9d2220d8 100644
--- a/nixos/common/modules/yubikey-auth.nix
+++ b/nixos/common/modules/yubikey-auth.nix
@@ -2,6 +2,7 @@
   security.pam.yubico = {
     enable = true;
     debug = true;
+    control = "required";
     mode = "challenge-response";
     id = [ "18550256" ];
   };