diff --git a/lib/modules/rclone.nix b/lib/modules/rclone.nix
index 7e5956e..9fe921a 100644
--- a/lib/modules/rclone.nix
+++ b/lib/modules/rclone.nix
@@ -271,8 +271,9 @@ let
         obscuredPasswordFile = mkPasswordFileOption { service = displayName; };
 
         webAuthnToken = lib.mkOption {
-          type = lib.types.strMatching "[0-9]{6}";
+          type = lib.types.nullOr (lib.types.strMatching "[0-9]{6}");
           description = "The 2 Factor Authentication code for logging in to ${displayName}.";
+          default = null;
         };
 
         webAuthnTokenFile = mkFileOption {