diff --git a/machines/rigel/configuration.nix b/machines/rigel/configuration.nix
index 5b39528..e9ce416 100644
--- a/machines/rigel/configuration.nix
+++ b/machines/rigel/configuration.nix
@@ -38,11 +38,14 @@
         secret = true;
       };
     };
-    runtimeInputs = [ pkgs.pwgen ];
+    runtimeInputs = [
+      pkgs.pwgen
+      pkgs.xkcdpass
+    ];
     script = ''
       pwgen -s 32 1 > $out/secret-key
       pwgen -s 32 1 > $out/oidc-key
-      pwgen -s 32 1 > $out/admin-password
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/admin-password
     '';
   };