diff --git a/modules/security.nix b/modules/security.nix
index 43b3042..a97e20e 100644
--- a/modules/security.nix
+++ b/modules/security.nix
@@ -8,6 +8,15 @@
 in
 {
   config = {
+    internal.allowUnfree = [ "libfprint-2-tod1-goodix" ];
+    services.fprintd = {
+      enable = true;
+      tod = {
+        enable = true;
+        driver = pkgs.libfprint-2-tod1-goodix;
+      };
+    };
+
     security.apparmor = {
       enable = true;
       killUnconfinedConfinables = true;