diff --git a/hosts/common/programs/mpv.nix b/hosts/common/programs/mpv.nix
index 7c8cf3d2..48336eed 100644
--- a/hosts/common/programs/mpv.nix
+++ b/hosts/common/programs/mpv.nix
@@ -62,7 +62,7 @@ in
       '';
     });
 
-    sandbox.method = null;
+    sandbox.method = "bwrap";
     # sandbox.method = "firejail";  #< fails on moby
 
     persist.byStore.plaintext = [ ".local/state/mpv/watch_later" ];