diff --git a/modules/nixos/_private/suites/server.nix b/modules/nixos/_private/suites/server.nix
index 8f3f91fd..1ebf51cb 100644
--- a/modules/nixos/_private/suites/server.nix
+++ b/modules/nixos/_private/suites/server.nix
@@ -48,6 +48,7 @@ in
           # Both are good for hardening as it only requires the keyfiles.
           PasswordAuthentication = false;
           PermitRootLogin = "no";
+          PermitEmptyPasswords = "no";
         };
       };