diff --git a/ansible/roles/profile_desktop_i3/tasks/main.yml b/ansible/roles/profile_desktop_i3/tasks/main.yml
index cd98058..9def1ae 100644
--- a/ansible/roles/profile_desktop_i3/tasks/main.yml
+++ b/ansible/roles/profile_desktop_i3/tasks/main.yml
@@ -29,6 +29,13 @@
     line: "session    optional  pam_gnome_keyring.so auto_start"
     state: present
 
+- name: Enable gnome-keyring PAM password hook
+  ansible.builtin.lineinfile:
+    path: /etc/pam.d/login
+    insertafter: '^password\s+include\s+system-local-login$'
+    line: "password   optional  pam_gnome_keyring.so use_authtok"
+    state: present
+
 - name: Copy desktop dotfiles
   ansible.builtin.copy:
     src: "{{ playbook_dir }}/../dotfiles/desktop/{{ item.src }}"