diff --git a/vars/per-machine/control/emergency-access/password-hash/value b/vars/per-machine/control/emergency-access/password-hash/value
new file mode 100644
index 0000000..72f0abe
--- /dev/null
+++ b/vars/per-machine/control/emergency-access/password-hash/value
@@ -0,0 +1 @@
+$6$CdKlusNv1xzU6Cjn$b3AKnL5iRs3s5LwgbmsngSRqaD7Rw5mVHZXeIcIcJiO65b/n14/iJW5JWy.6dNNEyWmVj3EYAGPLoOupvGuf4.
\ No newline at end of file
diff --git a/vars/per-machine/control/emergency-access/password/secret b/vars/per-machine/control/emergency-access/password/secret
new file mode 100644
index 0000000..f7cb83b
--- /dev/null
+++ b/vars/per-machine/control/emergency-access/password/secret
@@ -0,0 +1,14 @@
+{
+	"data": "ENC[AES256_GCM,data:TL5f32e9YQMB0vRY3vMivATwKE/8oDBKsGHUEWnrfA==,iv:kL6tyK46USKUb9cMflZoiBRlE/uHtPRIR4BQ0m6CxKo=,tag:tA1bGjwmCcVyTdTp1bCRSQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1yubikey1qtc8v5yqy3g5sh4trwwdp7elmavvkvkvzc4tfdnv2g8wyd8y5lc064mpv34",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IEZXQ2lTZyBBclYvY0RS\nMFpHOEpQU0kreWVlTmhqRkxzZGp4UnEvdGcybFRKSE4yYnZXNQpSSGlOaWRWcHFn\nNTk4S2J0dVdvSXk5RzJEaVZJY1VYa1hMcWdleGpRdFdRCi0tLSB0TUJoK3UxdVll\nWUxnaUFqUEExVFE2VllLanJSM2hJSHpxTlpFUVZqRXJJCuAtDqWR4cbc3snmpF/E\nXZn5hBsdyXaxRR1t5ZUCrKBl3zUBq6h/o+tUR105q3QWdm8WY2itIbc8ZEZ7hqi8\nCtc=\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-06-14T08:00:24Z",
+		"mac": "ENC[AES256_GCM,data:xbnHfzQnGPW6uwH5e0j47OUuwaaaVh7mOuBJGKtGbPEallPA8kAv4CxKQIwfOlVh2VjcAUoVa9sMq/1+cknbN8ubANQ5b8eBsL+dfz+9hcwtR5hrXxN85DsBgw1PVDLdxtFszqvzuQRjEWColWoUzL46ZGlqZ7luoxbVF1nPSak=,iv:xKHnp9UJDOGLt5YrYnGxFvLOrN9Qaumt8wp2WVYijMQ=,tag:/l2XipPDBiWYhHTU+vsC/Q==,type:str]",
+		"version": "3.12.1"
+	}
+}
diff --git a/vars/per-machine/control/emergency-access/password/users/berwn b/vars/per-machine/control/emergency-access/password/users/berwn
new file mode 120000
index 0000000..57d4221
--- /dev/null
+++ b/vars/per-machine/control/emergency-access/password/users/berwn
@@ -0,0 +1 @@
+../../../../../../sops/users/berwn
\ No newline at end of file