diff --git a/CHANGELOG b/CHANGELOG
index a50b8d2d5..5b7c70473 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -17,6 +17,7 @@ Environment:
 - updated nvim lastplace plugin
 - removed custom systemd-sysusers.service
 - use noto-fonts as default ttf-font in Xorg and Wayland
+- enabled ipv6 privacy extensions globally
 defaults:
 - removed SERVER_PUBLIC usage
 login:
@@ -32,6 +33,7 @@ setup:
 - updated UKI routine to use new ukify syntax with ukify.conf
 - enabled windowkeys in autoconfiguration
 - fixed neovim installation
+- enabled ipv6-privacy-extensions in autoconfiguration
 custom-bash-options.sh: 
 - only run remote-login.sh on archboot environment
 ---
diff --git a/usr/lib/archboot/installer/autoconfiguration.sh b/usr/lib/archboot/installer/autoconfiguration.sh
index 3dfdf2c85..c8b414c29 100644
--- a/usr/lib/archboot/installer/autoconfiguration.sh
+++ b/usr/lib/archboot/installer/autoconfiguration.sh
@@ -41,6 +41,12 @@ _auto_network()
     if [[ -e "/etc/profile.d/proxy.sh" ]]; then
         cp /etc/profile.d/proxy.sh "${_DESTDIR}"/etc/profile.d/proxy.sh
     fi
+    # enable ipv6 privacy extensions
+    if ! [[ -d ${_DESTDIR}/etc/systemd/network.conf.d ]]; then
+        mkdir -p "${_DESTDIR}/etc/systemd/network.conf.d"
+        cp /etc/systemd/network.conf.d/ipv6-privacy-extensions.conf \
+           "${_DESTDIR}"/etc/systemd/network.conf.d/ipv6-privacy-extensions.conf
+    fi
     sleep 2
 }
 
diff --git a/usr/lib/initcpio/install/archboot_net_common b/usr/lib/initcpio/install/archboot_net_common
index adcaa7e94..c5d6c27d6 100644
--- a/usr/lib/initcpio/install/archboot_net_common
+++ b/usr/lib/initcpio/install/archboot_net_common
@@ -8,7 +8,11 @@ build ()
     map add_binary ip getent ping
     add_file /usr/bin/archboot-network.sh /usr/bin/network
     # start dhcpcd on startup
-    add_file "/usr/share/archboot/net/etc/systemd/network/10-wired-auto-dhcp.network" "/etc/systemd/network/10-wired-auto-dhcp.network"
+    add_file /usr/share/archboot/net/etc/systemd/network/10-wired-auto-dhcp.network \
+             /etc/systemd/network/10-wired-auto-dhcp.network
+    # ipv6 privacy extensions
+    add_file /usr/share/archboot/net/etc/systemd/network.conf.d/ipv6-privacy-extensions.conf \
+             /etc/systemd/network.conf.d/ipv6-privacy-extensions.conf
 }
 
 help ()
diff --git a/usr/share/archboot/net/etc/systemd/network.conf.d/ipv6-privacy-extensions.conf b/usr/share/archboot/net/etc/systemd/network.conf.d/ipv6-privacy-extensions.conf
new file mode 100644
index 000000000..0e9ceb4e8
--- /dev/null
+++ b/usr/share/archboot/net/etc/systemd/network.conf.d/ipv6-privacy-extensions.conf
@@ -0,0 +1,2 @@
+[Network]
+IPv6PrivacyExtensions=yes