diff --git a/system/zenix/hardware.nix b/system/zenix/hardware.nix
index c0b0758..8588c32 100644
--- a/system/zenix/hardware.nix
+++ b/system/zenix/hardware.nix
@@ -19,7 +19,11 @@
       options = [ "subvol=@" "compress=zstd" "autodefrag" ];
     };
 
-  boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-uuid/cc0617df-8cbf-4618-abbc-df64c96de151";
+  boot.initrd.luks.devices."cryptroot" = {
+    device = "/dev/disk/by-uuid/cc0617df-8cbf-4618-abbc-df64c96de151";
+    keyFileSize = 4096;
+    keyFile = "/dev/disk/by-id/usb-Generic_Flash_Disk_BCC97785-0:0";
+  };
 
   fileSystems."/home" =
     { device = "/dev/disk/by-uuid/2dad5ed6-44cc-4d9d-9392-32afaa7b3909";