diff --git a/init.el b/init.el
index 87fe0a4..5ae8714 100644
--- a/init.el
+++ b/init.el
@@ -99,6 +99,12 @@
         `(("." .
            ,(expand-file-name "var/backups/" user-emacs-directory)))))
 
+(use-package trust-manager
+  :ensure t
+  :demand t
+  :config
+  (trust-manager-mode +1))
+
 (use-package repeat
   :config
   (repeat-mode +1))
diff --git a/lock/flake.lock b/lock/flake.lock
index 39bb974..99999c7 100644
--- a/lock/flake.lock
+++ b/lock/flake.lock
@@ -1066,6 +1066,7 @@
         "tablist": "tablist",
         "terraform-mode": "terraform-mode",
         "transient": "transient",
+        "trust-manager": "trust-manager",
         "twist": "twist",
         "typst-ts-mode": "typst-ts-mode",
         "vertico": "vertico",
@@ -1206,6 +1207,22 @@
         "type": "github"
       }
     },
+    "trust-manager": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1777205109,
+        "narHash": "sha256-q+QP56TcuATcJ8K72Dzxu6w/Oq/J2wQsIQbBz1gb20A=",
+        "ref": "refs/heads/master",
+        "rev": "530c559ffa01b99ced8073ba4c74f1b8152a0ef2",
+        "revCount": 34,
+        "type": "git",
+        "url": "https://git.sr.ht/~eshel/trust-manager"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://git.sr.ht/~eshel/trust-manager"
+      }
+    },
     "twist": {
       "flake": false,
       "locked": {
diff --git a/lock/flake.nix b/lock/flake.nix
index 91baae1..531fb75 100644
--- a/lock/flake.nix
+++ b/lock/flake.nix
@@ -420,6 +420,11 @@
       repo = "transient";
       type = "github";
     };
+    trust-manager = {
+      flake = false;
+      type = "git";
+      url = "https://git.sr.ht/~eshel/trust-manager";
+    };
     twist = {
       flake = false;
       owner = "emacs-twist";