diff --git a/roles/base/tasks/users/rene.yml b/roles/base/tasks/users/rene.yml
index 2a5bab9..fa8232a 100644
--- a/roles/base/tasks/users/rene.yml
+++ b/roles/base/tasks/users/rene.yml
@@ -1,9 +1,12 @@
+- include_vars: 'users.yml'
+
 - name: users | rene | ensure account is locked
   user:
     name: rene
     shell: "/usr/bin/zsh"
     groups: "sudo"
     append: True
+    password: "{{ rene_passwd | password_hash('sha256') }}"
 
 # - name: users | rene | install public ssh keys
 #   authorized_key:
diff --git a/roles/base/vars/main.yml b/roles/base/vars/main.yml
index 2b9c5a7..533bad8 100644
--- a/roles/base/vars/main.yml
+++ b/roles/base/vars/main.yml
@@ -1,2 +1 @@
-rene_password:
 root_home: "{{ lookup('env','HOME') }}"
\ No newline at end of file
diff --git a/roles/base/vars/users.yml b/roles/base/vars/users.yml
new file mode 100644
index 0000000..9ef59db
--- /dev/null
+++ b/roles/base/vars/users.yml
@@ -0,0 +1,6 @@
+$ANSIBLE_VAULT;1.1;AES256
+65646630353833633230363131363462653336636133613338363230323636333133386431346639
+6333613934316432646430663737336462356437663536660a333837333865626262343637636330
+61343133383034396563623931643735366133363261376437373138306464323733326334393734
+3733633431363531320a626638643233306631313631333639656131656136383931653562663937
+30333539646265653161396639633939623435623935373138373663313837313461