diff --git a/hosts/home/configuration.nix b/hosts/home/configuration.nix
index e9661b8..039cd89 100644
--- a/hosts/home/configuration.nix
+++ b/hosts/home/configuration.nix
@@ -7,7 +7,6 @@
     ./users
   ];
 
-  security.pam.u2f.cue = true;
   local.yubikey.enable = true;
 
   ################################################################################
diff --git a/modules/nixos/configs/yubikey.nix b/modules/nixos/configs/yubikey.nix
index 3e76638..b0ae12e 100644
--- a/modules/nixos/configs/yubikey.nix
+++ b/modules/nixos/configs/yubikey.nix
@@ -12,6 +12,7 @@ let cfg = config.local.yubikey; in
     security.pam.u2f = {
       enable = true;
       control = "required";
+      cue = lib.mkDefault true;
     };
 
     services.udev.packages = [ pkgs.yubikey-personalization ];