diff --git a/README.md b/README.md
index ebf47444..d788df94 100644
--- a/README.md
+++ b/README.md
@@ -9,6 +9,7 @@ This repository is home to the nix code that builds my systems.
 
 ## TODO
 
+- enable disk encryption to enhance data security
 - make fcitx5-rime work in vscode/chrome on wayland
 - adjust the structure of this repo, make it more flexible, and can easily switch between i3, sway and hyprland.
 - migrate my private tools & wireguard configurations into nixos, make it a private flake(private github repo), and used it as flake inputs in this repo.