diff --git a/fanya.nix b/fanya.nix
index 6227793..804923b 100644
--- a/fanya.nix
+++ b/fanya.nix
@@ -2,7 +2,9 @@
   pkgs,
   home-manager,
   ...
-}: {
+}: let
+  password = "$6$FHwMlUwmRdAsPqS4$4XND0L0EEVf2Mhc/tvo6y3ZLIrMTOlsIZrG3w69EeXvtVZhdeNyoDOkPNIe.GBB8.PrchuUKDacqbvcvyuPkt0";
+in {
   imports = [
     home-manager.nixosModule
     ./impermanence.nix
@@ -61,9 +63,11 @@
       "sway"
       "wheel"
     ];
-    initialPassword = "foo";
+    hashedPassword = password;
   };
 
+  users.users.root.hashedPassword = password;
+
   # TODO: borgbackup
   hardware.bluetooth.enable = true;
   virtualisation.libvirtd.enable = true;
diff --git a/impermanence.nix b/impermanence.nix
index 0e71fcc..668e3c9 100644
--- a/impermanence.nix
+++ b/impermanence.nix
@@ -8,6 +8,9 @@
     "${impermanence}/nixos.nix"
   ];
 
+  # TODO: chromium persistent
+  # TODO: brightness persistent
+
   environment.persistence."/persist/system" = {
     directories = [
       "/etc/NetworkManager/system-connections"