diff --git a/roles/fai/defaults/main.yml b/roles/fai/defaults/main.yml
index 9e7ec96..18aed0f 100644
--- a/roles/fai/defaults/main.yml
+++ b/roles/fai/defaults/main.yml
@@ -34,6 +34,7 @@ fai_loguser:
 fai_menu_default: 'HW4F Desktop Jammy'
 fai_nfsroot_force_rebuild: false
 
+fai_hw4f_password_salt: "toXu6kiez1haetan"
 fai_hw4f_rootpw_fai: "fai"
 fai_hw4f_profile_username: "user"
 fai_hw4f_profile_password: "dezentrale"
diff --git a/roles/fai/templates/etc/fai/nfsroot.conf.j2 b/roles/fai/templates/etc/fai/nfsroot.conf.j2
index 5d978ed..96b658d 100644
--- a/roles/fai/templates/etc/fai/nfsroot.conf.j2
+++ b/roles/fai/templates/etc/fai/nfsroot.conf.j2
@@ -24,8 +24,8 @@ FAI_DEBOOTSTRAP_OPTS="--exclude=wget"
 # 
 # echo "yoursecrectpassword" | mkpasswd -m md5 -s
 
-FAI_ROOTPW="{{ fai_hw4f_rootpw_fai | password_hash("sha512") }}"
-#FAI_ROOTPW='$y$j9T$9Gpl96oNFKz9us5aM5iCb.$v/JHwnHRfaxMCPK/nsxu.DAmoGB1hlgRQBDIxTeMd9/'
+FAI_ROOTPW="{{ fai_hw4f_rootpw_fai
+        | password_hash("sha512", fai_hw4f_password_salt ) }}"
 
 # Directory on the install server where the nfsroot is created.
 NFSROOT="{{ fai_dir_nfsroot }}"