diff --git a/config.h b/config.h
new file mode 100644
index 0000000..a7b3617
--- /dev/null
+++ b/config.h
@@ -0,0 +1,12 @@
+/* user and group to drop privileges to */
+static const char *user  = "nobody";
+static const char *group = "nobody";
+
+static const char *colorname[NUMCOLS] = {
+	[INIT] =   "#2e3440",     /* after initialization */
+	[INPUT] =  "#81a1c1",   /* during input */
+	[FAILED] = "#bf616a",   /* wrong password */
+};
+
+/* treat a cleared input like a wrong password (color) */
+static const int failonclear = 1;