diff --git a/hw/vade/hardware-configuration.nix b/hw/vade/hardware-configuration.nix
index 044127f..25755f9 100644
--- a/hw/vade/hardware-configuration.nix
+++ b/hw/vade/hardware-configuration.nix
@@ -18,7 +18,13 @@
       fsType = "ext4";
     };
 
-  boot.initrd.luks.devices."luks-e51c3431-ac26-4429-88a6-cebba8878935".device = "/dev/disk/by-uuid/e51c3431-ac26-4429-88a6-cebba8878935";
+  boot.initrd.luks.devices."luks-e51c3431-ac26-4429-88a6-cebba8878935" = {
+    device = "/dev/disk/by-uuid/e51c3431-ac26-4429-88a6-cebba8878935";
+    crypttabExtraOpts = [
+      "fido2-device=auto"
+      "token-timeout=10"
+    ];
+  };
 
   # Use systemd in initrd for FIDO2 LUKS unlock support
   boot.initrd.systemd.enable = true;