diff --git a/hosts/minoxy-workstation/hardware-configuration.nix b/hosts/minoxy-workstation/hardware-configuration.nix
index 7d4f17d..f525d2c 100644
--- a/hosts/minoxy-workstation/hardware-configuration.nix
+++ b/hosts/minoxy-workstation/hardware-configuration.nix
@@ -9,7 +9,7 @@
   boot.initrd.availableKernelModules =
     [ "xhci_pci" "ahci" "nvme" "usb_storage" "usbhid" "sd_mod" "sr_mod" ];
   boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [ "kvm-intel" ];
+	boot.kernelModules = [ "kvm-intel" "ecryptfs" ];
   boot.extraModulePackages = [ ];
 
   fileSystems."/shared" = {
diff --git a/hosts/nixyos-asus/hardware-configuration.nix b/hosts/nixyos-asus/hardware-configuration.nix
index 0909083..1f3aec7 100644
--- a/hosts/nixyos-asus/hardware-configuration.nix
+++ b/hosts/nixyos-asus/hardware-configuration.nix
@@ -9,7 +9,7 @@
 		];
 
 	boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" "rtsx_usb_sdmmc" ];
-	boot.kernelModules = [ "kvm-intel" ];
+	boot.kernelModules = [ "kvm-intel" "ecryptfs" ];
 
 	fileSystems."/" =
 		{ device = "/dev/disk/by-uuid/881615c5-5c12-46c5-8bd2-1959f9347980";
diff --git a/hosts/thinix-thinkpad/hardware-configuration.nix b/hosts/thinix-thinkpad/hardware-configuration.nix
index 74ac402..aa95ede 100644
--- a/hosts/thinix-thinkpad/hardware-configuration.nix
+++ b/hosts/thinix-thinkpad/hardware-configuration.nix
@@ -8,6 +8,7 @@
     [ (modulesPath + "/installer/scan/not-detected.nix")
     ];
 
+  boot.kernelModules = [ "ecryptfs" ];
   boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" ];
 
   fileSystems = {
diff --git a/modules/essential.nix b/modules/essential.nix
index ae69385..8c1e353 100644
--- a/modules/essential.nix
+++ b/modules/essential.nix
@@ -15,6 +15,7 @@
   security.polkit.enable = true;
   security.pam.services.login.enableGnomeKeyring = true;
   services.gnome.gnome-keyring.enable = true;
+  security.pam.enableEcryptfs = true;
 
   security.polkit.extraConfig = ''
     polkit.addRule(function(action, subject) {
diff --git a/user/packages.nix b/user/packages.nix
index 84347e8..444633c 100644
--- a/user/packages.nix
+++ b/user/packages.nix
@@ -145,6 +145,7 @@
     git-lfs
     sops
     age
+    ecryptfs
     ansible
     android-tools
     sdkmanager