diff --git a/lib/types/swap.nix b/lib/types/swap.nix
index 0cb4270f..ca544b60 100644
--- a/lib/types/swap.nix
+++ b/lib/types/swap.nix
@@ -60,7 +60,8 @@
     };
     _create = diskoLib.mkCreateOption {
       inherit config options;
-      default = ''
+      # TODO: we don't support encrypted swap yet
+      default = lib.optionalString (!config.randomEncryption) ''
         if ! blkid "${config.device}" -o export | grep -q '^TYPE='; then
           mkswap \
             ${toString config.extraArgs} \