diff --git a/modules/nixos/services/base/default.nix b/modules/nixos/services/base/default.nix
index d0d4f61..b1bdde0 100644
--- a/modules/nixos/services/base/default.nix
+++ b/modules/nixos/services/base/default.nix
@@ -114,7 +114,7 @@ in
       tpm2.abrmd.enable = lib.mkDefault true;
       sudo = {
         enable = true;
-        wheelNeedsPassword = lib.mkDefault false;
+        wheelNeedsPassword = lib.mkDefault true;
       };
     };
 
diff --git a/modules/nixos/services/gui/default.nix b/modules/nixos/services/gui/default.nix
index 7aee856..0b7ead1 100644
--- a/modules/nixos/services/gui/default.nix
+++ b/modules/nixos/services/gui/default.nix
@@ -60,7 +60,6 @@ in
     hardware.pulseaudio.enable = false;
 
     security.rtkit.enable = true;
-    security.sudo.wheelNeedsPassword = true;
 
     programs.gnupg.agent = {
       enable = true;