diff --git a/modules/nixos/services/openssh/default.nix b/modules/nixos/services/openssh/default.nix
index 9a9170bcf..37e6b3810 100644
--- a/modules/nixos/services/openssh/default.nix
+++ b/modules/nixos/services/openssh/default.nix
@@ -102,7 +102,7 @@ in
         PubkeyAuthentication = "yes";
         StreamLocalBindUnlink = "yes";
         UseDns = false;
-        UsePAM = false;
+        UsePAM = true;
         X11Forwarding = false;
 
         # key exchange algorithms recommended by `nixpkgs#ssh-audit`