diff --git a/roles/luks_ssh/tasks/main.yml b/roles/luks_ssh/tasks/main.yml
index 3866043..9f6fb87 100644
--- a/roles/luks_ssh/tasks/main.yml
+++ b/roles/luks_ssh/tasks/main.yml
@@ -18,6 +18,13 @@
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
+# See https://github.com/gsauthof/dracut-sshd/tree/master?tab=readme-ov-file#faq
+- name: Unlock root account for SSH
+  ansible.builtin.user:
+    name: root
+    password: "*" # * means only SSH key login is allowed, this is needed for the initramfs sshd login
+  become: true
+
 - name: Create dracut extension
   ansible.builtin.file:
     path: "{{ luks_ssh_dracut_ssh_dir }}"