diff --git a/main.go b/main.go
index ce6c704..a71ce8c 100644
--- a/main.go
+++ b/main.go
@@ -64,7 +64,7 @@ func unlockZFSHandler(w http.ResponseWriter, r *http.Request) {
 	unlockMutex.Lock()
 	defer unlockMutex.Unlock()
 
-	cmd := exec.CommandContext(ctx, unlockCommand)
+	cmd := exec.CommandContext(ctx, "sudo", unlockCommand)
 
 	cmd.Stdin = strings.NewReader(payload.Passphrase)