diff --git a/etc/default.nix b/etc/default.nix
index a89b78bf289c..6614b6124234 100644
--- a/etc/default.nix
+++ b/etc/default.nix
@@ -141,6 +141,7 @@ import ../helpers/make-etc.nix {
     )
     [
       "login"
+      "slim"
       "su"
       "other"
       "passwd"
diff --git a/etc/default/passwd b/etc/default/passwd
index fe83ceb209c3..5804e28c38bc 100644
--- a/etc/default/passwd
+++ b/etc/default/passwd
@@ -4,7 +4,7 @@ CRYPT=des
 
 # for local files, use a more secure hash. We
 # don't need to be portable here:
-CRYPT_FILES=md5
+CRYPT_FILES=blowfish
 
 # sometimes we need to specify special options for
 # a hash (variable is prepended by the name of the
diff --git a/etc/pam.d/slim b/etc/pam.d/slim
new file mode 100644
index 000000000000..50f3cc5ce607
--- /dev/null
+++ b/etc/pam.d/slim
@@ -0,0 +1,4 @@
+auth     include        common
+account  include        common
+password include        common
+session  include        common