diff --git a/common/users.nix b/common/users.nix
index 6498912..ff79f5d 100644
--- a/common/users.nix
+++ b/common/users.nix
@@ -5,7 +5,10 @@
     mutableUsers = false;
 
     users = {
-      root.hashedPassword = "!";
+      root = {
+        hashedPassword = "!";
+        openssh.authorizedKeys.keys = builtins.attrValues (import ../pubkeys.nix).hosts;
+      };
       lukas = {
         uid = 1000;
         isNormalUser = true;