diff --git a/configuration.nix b/configuration.nix
index ac975fc..9db378a 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -16,6 +16,8 @@
   services.openssh.enable = true;
   networking.firewall.rejectPackets = true;
 
+  # Preserve password changes
+  users.mutableUsers = true;
   users.users = {
     root.openssh.authorizedKeys.keyFiles = [ ./linus.pub ];
     linus = {