diff --git a/nixos-installer/README.md b/nixos-installer/README.md
index 799c0bac..f3e3f0ce 100644
--- a/nixos-installer/README.md
+++ b/nixos-installer/README.md
@@ -83,7 +83,7 @@ cryptsetup --help
 
 # NOTE: `cat shoukei.md | grep luks > luks.sh` to generate this script
 # encrypt the root partition with luks2 and argon2id, will prompt for a passphrase, which will be used to unlock the partition.
-cryptsetup luksFormat --type luks2 --pbkdf argon2id --cipher aes-xts-plain64 --key-size 512 --hash sha512 /dev/nvme0n1p2
+cryptsetup luksFormat --type luks2 --cipher aes-xts-plain64 --hash sha512 --iter-time 5000 --key-size 256 --pbkdf argon2id --use-urandom --verify-passphrase /dev/nvme0n1p2
 
 # show status
 cryptsetup luksDump /dev/nvme0n1p2
diff --git a/nixos-installer/README.shoukei.md b/nixos-installer/README.shoukei.md
index f2b15851..d5c96607 100755
--- a/nixos-installer/README.shoukei.md
+++ b/nixos-installer/README.shoukei.md
@@ -67,7 +67,7 @@ cryptsetup --help
 
 # NOTE: `cat shoukei.md | grep luks > format.sh` to generate this script
 # encrypt the root partition with luks2 and argon2id, will prompt for a passphrase, which will be used to unlock the partition.
-cryptsetup luksFormat --type luks2 --pbkdf argon2id --cipher aes-xts-plain64 --key-size 512 --hash sha512 /dev/nvme0n1p4
+cryptsetup luksFormat --type luks2 --cipher aes-xts-plain64 --hash sha512 --iter-time 5000 --key-size 256 --pbkdf argon2id --use-urandom --verify-passphrase /dev/nvme0n1p4
 
 # show status
 cryptsetup luksDump /dev/nvme0n1p4