diff --git a/roles/common/templates/etc_login.defs.j2 b/roles/common/templates/etc_login.defs.j2
index b05ea1e62..3a462a9b5 100644
--- a/roles/common/templates/etc_login.defs.j2
+++ b/roles/common/templates/etc_login.defs.j2
@@ -290,8 +290,8 @@ ENCRYPT_METHOD SHA512
 # If only one of the MIN or MAX values is set, then this value will be used.
 # If MIN > MAX, the highest value will be used.
 #
-# SHA_CRYPT_MIN_ROUNDS 5000
-# SHA_CRYPT_MAX_ROUNDS 5000
+SHA_CRYPT_MIN_ROUNDS 10000
+SHA_CRYPT_MAX_ROUNDS 65536
 
 ################# OBSOLETED BY PAM ##############
 #						#
diff --git a/roles/konstruktoid.hardening/templates/etc/login.defs.j2 b/roles/konstruktoid.hardening/templates/etc/login.defs.j2
index dc658d868..f50f4630f 100644
--- a/roles/konstruktoid.hardening/templates/etc/login.defs.j2
+++ b/roles/konstruktoid.hardening/templates/etc/login.defs.j2
@@ -1,5 +1,3 @@
-SHA_CRYPT_MAX_ROUNDS 65536
-SHA_CRYPT_MIN_ROUNDS 10000
 SU_NAME su
 SYSLOG_SG_ENAB yes
 SYSLOG_SU_ENAB yes