diff --git a/modules/nixos/system/impermanence.nix b/modules/nixos/system/impermanence.nix
index f5b49d0..337b7c6 100644
--- a/modules/nixos/system/impermanence.nix
+++ b/modules/nixos/system/impermanence.nix
@@ -50,6 +50,9 @@ in
 
           # NetworkManager connection profiles and WiFi passwords
           "/etc/NetworkManager/system-connections"
+
+          # user passwords
+          "/etc/shadow"
         ];
         # files = [ # the fuck is this file
         #   "/etc/machine-id"