diff --git a/machines/_base.nix b/machines/_base.nix
index 44dfadd..857e458 100644
--- a/machines/_base.nix
+++ b/machines/_base.nix
@@ -73,7 +73,7 @@ in {
     };
 
     users.users.root = {
-      initialHashedPassword = "";
+      initialHashedPassword = "$y$j9T$lf/Z1Db.lAXan2WN/YQEF.$ILMN5CK4eImzrioB04D.VgD7wrV2rwUjcTi..WE5ea6";
 
       openssh.authorizedKeys.keys = [
         # no obligation to have name attached to keys