diff --git a/hosts/common/programs/sane-scripts.nix b/hosts/common/programs/sane-scripts.nix
index 338a180b9..1684b65a5 100644
--- a/hosts/common/programs/sane-scripts.nix
+++ b/hosts/common/programs/sane-scripts.nix
@@ -243,7 +243,7 @@ in
     "sane-scripts.which".sandbox.method = "bunpen";
 
     "sane-scripts.wipe".sandbox = {
-      method = "bwrap";
+      method = "bunpen";
       whitelistDbus = [ "user" ];  #< for `secret-tool`
       whitelistS6 = true;  #< for stopping services before wiping
       extraHomePaths = [