diff --git a/hosts/cube.nix b/hosts/cube.nix
index ad437b3..3a0bb5f 100644
--- a/hosts/cube.nix
+++ b/hosts/cube.nix
@@ -40,6 +40,9 @@
     pam.services.swaylock = {};
     polkit.enable = true;
     rtkit.enable = true;
+    sudo = {
+      wheelNeedsPassword = true;
+    }
   };
   services.envfs.enable = true;
   services.flatpak.enable = true;