diff --git a/modules/config/default/config.el b/modules/config/default/config.el
index 2dacb9b11..c4cdfd157 100644
--- a/modules/config/default/config.el
+++ b/modules/config/default/config.el
@@ -16,6 +16,11 @@
 ;; Config
 ;;
 
+;; Don't store authinfo in non-encrypted files!
+(defvar auth-sources
+  (list (expand-file-name "authinfo.gpg" doom-etc-dir)
+        "~/.authinfo.gpg"))
+
 (after! epa
   (setq epa-file-encrypt-to (or epa-file-encrypt-to user-mail-address)
         ;; With GPG 2.1, this forces gpg-agent to use the Emacs minibuffer to