diff --git a/configurations/bbsteamie/default.nix b/configurations/bbsteamie/default.nix
index dc1a6939..ac5a8da0 100644
--- a/configurations/bbsteamie/default.nix
+++ b/configurations/bbsteamie/default.nix
@@ -26,6 +26,9 @@
   # ------------------------------------------------
   users.users.${mainUser} = {
     isNormalUser = true;
+
+    hashedPassword = "$y$j9T$OSui2t4Ol8HKY2E09k4Wl/$fv6kORhiLzbh7kaoAxAS1FypQD1VYjTUYhblwUJrcS8";
+
     extraGroups = [
       "wheel"
       "adm"
diff --git a/configurations/binto/default.nix b/configurations/binto/default.nix
index 3e92ec93..c1a76b68 100644
--- a/configurations/binto/default.nix
+++ b/configurations/binto/default.nix
@@ -26,6 +26,9 @@
   # ------------------------------------------------
   users.users.${mainUser} = {
     isNormalUser = true;
+
+    hashedPassword = "$y$j9T$uCv3kB5LI3Shj/5liU9cS0$4s3wWoH4iY29DLC3lJwNaIcurcjsj8L02cMY4EDtnC6";
+
     extraGroups = [
       "wheel"
       "input"
diff --git a/configurations/cluster/default.nix b/configurations/cluster/default.nix
index 71b88595..184bc302 100644
--- a/configurations/cluster/default.nix
+++ b/configurations/cluster/default.nix
@@ -29,6 +29,12 @@ in {
     # ------------------------------------------------
     users.users.${mainUser} = {
       isNormalUser = true;
+
+      hashedPassword =
+        if deviceName == "thingone"
+        then "$y$j9T$H.Uu5T7k5OLomqiPtFkVX0$ojaLWjxi.MDjxY00rT5r2dhJkt.9h.pXHgOtlhf3sN/"
+        else "$y$j9T$dXC7oiLsG7fCBXS1HUxo21$JjDm17jEwM41gnjMUaFdvgSzWXoGYQbqm867VtDAjF7";
+
       extraGroups = [
         "wheel"
         "adm"
diff --git a/configurations/homie/default.nix b/configurations/homie/default.nix
index 7c8eb0fc..a978218f 100644
--- a/configurations/homie/default.nix
+++ b/configurations/homie/default.nix
@@ -27,6 +27,9 @@
   # ------------------------------------------------
   users.users.${mainUser} = {
     isNormalUser = true;
+
+    hashedPassword = "$y$j9T$CBC0wX9ZrZeXE296CWTvK.$xTJE54Pd4EPrv/Q4TQ42ahIDXQYoavcnwcsItw0hk.B";
+
     extraGroups = [
       "wheel"
       "adm"
diff --git a/configurations/nos/default.nix b/configurations/nos/default.nix
index aa8c9ae6..ac0438cb 100644
--- a/configurations/nos/default.nix
+++ b/configurations/nos/default.nix
@@ -26,6 +26,9 @@
   # ------------------------------------------------
   users.users.${mainUser} = {
     isNormalUser = true;
+
+    hashedPassword = "$y$j9T$DSLWphPlpiahIw7KQciF1/$FOjIbplU1Fknv5W.A15Xgdk.WNXP.zeWkJiewSUTGPC";
+
     extraGroups = [
       "wheel"
       "adm"
diff --git a/configurations/servivi/default.nix b/configurations/servivi/default.nix
index 564b940c..8ea5eed2 100644
--- a/configurations/servivi/default.nix
+++ b/configurations/servivi/default.nix
@@ -27,6 +27,9 @@
   users.users = {
     ${mainUser} = {
       isNormalUser = true;
+
+      hashedPassword = "$y$j9T$723InNIdzpJ1.TqxroiXa0$thewApg1l3lpgq.qAwh3k0c/.fu1H1TWRyA8dfjvpP0";
+
       extraGroups = [
         "wheel"
         "adm"
diff --git a/configurations/wim/default.nix b/configurations/wim/default.nix
index 6eabbe27..ae0048a0 100644
--- a/configurations/wim/default.nix
+++ b/configurations/wim/default.nix
@@ -29,6 +29,9 @@
   # ------------------------------------------------
   users.users.${mainUser} = {
     isNormalUser = true;
+
+    hashedPassword = "$y$j9T$ZwnaqAzFjKB/1oJSvypdt.$CtQzgoUWxNutP1DsTBrFHXiTGP6JJp/bMchl1VaADSA";
+
     extraGroups = [
       "wheel"
       "input"
diff --git a/modules/base/default.nix b/modules/base/default.nix
index 2e3028f4..bb4ad4db 100644
--- a/modules/base/default.nix
+++ b/modules/base/default.nix
@@ -116,6 +116,8 @@ in {
         ;
     };
 
+    users.mutableUsers = false;
+
     home-manager.users = let
       default = {
         imports = [