diff --git a/homes/aly/default.nix b/homes/aly/default.nix
index 172a47dd..c2c2eacc 100644
--- a/homes/aly/default.nix
+++ b/homes/aly/default.nix
@@ -61,6 +61,28 @@ in {
 
     gitui.enable = true;
     home-manager.enable = true;
+
+    password-store = {
+      enable = true;
+
+      package = pkgs.pass.withExtensions (exts:
+        with exts; [
+          pass-checkup
+          pass-file
+          pass-genphrase
+          pass-otp
+          pass-update
+        ]);
+    };
+
+    rofi.pass = {
+      enable = true;
+      package = pkgs.rofi-pass-wayland;
+
+      extraConfig = ''
+        USERNAME_field='login'
+      '';
+    };
   };
 
   systemd.user.startServices = "legacy"; # Needed for auto-mounting agenix secrets.