diff --git a/system-auth.pamd b/system-auth.pamd
index e87961c..028e644 100644
--- a/system-auth.pamd
+++ b/system-auth.pamd
@@ -6,8 +6,8 @@ auth        required      pam_deny.so
 
 account     required      pam_unix.so
 
-password    required      pam_cracklib.so try_first_pass use_authtok retry=3
-password    sufficient    pam_unix.so  try_first_pass shadow nullok md5
+password    required      pam_cracklib.so try_first_pass retry=3
+password    sufficient    pam_unix.so  try_first_pass use_authtok shadow nullok md5
 password    required      pam_deny.so
 
 session     optional      pam_keyinit.so revoke