diff --git a/samba/files/smb.conf.jinja b/samba/files/smb.conf.jinja
index 2c737b7..67b0fd3 100644
--- a/samba/files/smb.conf.jinja
+++ b/samba/files/smb.conf.jinja
@@ -14,6 +14,8 @@
   unix password sync = no
   map to guest = bad user
   usershare max shares = 0
+  encrypt passwords = yes
+  smb encrypt = required
 
 {% if salt.pillar.get('samba:enable_homes', false) %}
 [homes]