diff --git a/.chezmoi.toml.tmpl b/.chezmoi.toml.tmpl
index b8f2b6d..2ad529b 100644
--- a/.chezmoi.toml.tmpl
+++ b/.chezmoi.toml.tmpl
@@ -1,10 +1,19 @@
+{{ $passphrase := promptStringOnce . "passphrase" "passphrase" -}}
+
 progress = true
 
 [git]
 autoPush = true
 
+encryption = "gpg"
+
+[gpg]
+symmetric = true
+args = ["--batch", "--passphrase", {{ $passphrase | quote }}, "--no-symkey-cache"]
+
 [data]
 gpgKey = {{ output "get-gpg-key" | trim | quote }}
+passphrase = {{ $passphrase | quote }}
 
 [data.drapeau]
 colorscheme = 'catppuccin-macchiato'