What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Yes. macOS supports using Touch ID to authenticate local sudo commands through /etc/pam.d/sudo_local, a configuration Apple says persists across software updates. The practical setup is to copy the template shipped with your Mac to that local file and enable its pam_tid.so entry.
Can Touch ID on Mac authenticate sudo in Terminal?
Yes. Apple Support says, “Touch ID can be allowed for sudo with a configuration that persists across software updates using /etc/pam.d/sudo_local.” Apple’s macOS Sonoma enterprise update note, published November 6, 2024, points administrators to /etc/pam.d/sudo_local.template for details: Apple Support: What’s new for enterprise in macOS Sonoma.
The setup below follows a community walkthrough for copying the template and uncommenting its authentication line; that specific procedure is not an Apple quotation. See the edited May 19, 2024 answer on Ask Different.
Enable Touch ID for sudo
Use the template present on your Mac as the version-specific reference. The instructions assume you have administrator access and can use Terminal.
#1 Best Overall
- Magic Keyboard is available with Touch ID, providing fast, easy and secure authentication for logins and to unlock your Mac.
- Magic Keyboard with Touch ID and Numeric Keypad delivers a remarkably comfortable and precise typing experience.
- It features an extended layout, with document navigation controls for quick scrolling and full-size arrow keys, which are great for gaming.
- The numeric keypad is also ideal for spreadsheets and finance applications.
- It’s wireless and features a rechargeable battery that will power your keyboard for about a month or more between charges.
-
Open Terminal and copy the shipped template to the local configuration file:
sudo cp /etc/pam.d/sudo_local.template /etc/pam.d/sudo_local -
Edit the local copy with a command-line editor, such as nano:
Rank #2
Apple Magic Keyboard with Touch ID for Mac Models with Apple Silicon - US English , Bluetooth- Magic Keyboard is available with Touch ID, providing fast, easy and secure authentication for logins and to unlock your Mac.
- Magic Keyboard with Touch ID delivers a remarkably comfortable and precise typing experience.
- It’s also wireless and rechargeable, with an incredibly long-lasting internal battery that will power your keyboard for about a month or more between charges.
- It pairs automatically with your Mac, so you can get to work right away.
- It features a USB-C port and includes a woven USB-C Charge Cable that lets you pair and charge by connecting to a USB-C port on your Mac.
sudo nano /etc/pam.d/sudo_local -
Find the line
#auth sufficient pam_tid.soand remove the leading#, so it reads:Recommended: PC Feels Slow? A Free Scan Shows What's Dragging Windows Down →Recommended: Crashes or Glitches? A Free Driver Scan Usually Finds the Culprit →Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.auth sufficient pam_tid.soIn nano, save with Control-O, press Return to confirm the filename, then exit with Control-X.
Rank #3
Apple Magic Keyboard with Touch ID and Numeric Keypad for Mac Models with Apple Silicon - US English - White Keys, Bluetooth, Bluetooth- Magic Keyboard is available with Touch ID, providing fast, easy and secure authentication for logins and to unlock your Mac.
- Magic Keyboard with Touch ID and Numeric Keypad delivers a remarkably comfortable and precise typing experience.
- It features an extended layout, with document navigation controls for quick scrolling and full-size arrow keys, which are great for gaming.
- The numeric keypad is also ideal for spreadsheets and finance applications.
- It’s wireless and features a rechargeable battery that will power your keyboard for about a month or more between charges.
-
Run a command that requests
sudo, for examplesudo -v. If Touch ID is available in that context, macOS should offer fingerprint authentication. You can still enter your account password when prompted.
What the setting changes—and what it does not
The change adds Touch ID as an authentication method for sudo through the local PAM configuration. It does not remove the account password requirement from macOS generally, nor does it make every authentication prompt use a fingerprint.
Rank #4
- Match-in-Sensor Advanced Fingerprint Technology: Combines excellent biometric performance and 360° readability with anti-spoofing technology. Exceeds industry standards for false rejection rate (FRR 2%) and false acceptance rate (FAR 0.001%). Fingerprint data is isolated and secured in the sensor, so only an encrypted match is transferred.
- Designed for Windows Hello and Windows Hello for Business (Windows 10 and Windows 11): Login on your Windows using Microsoft's built-in login feature with just your fingerprint, no need to remember usernames and passwords; can be used with up to 10 different fingerprints. NOT compatible with MacOS and ChromeOS.
- Designed to Support Passkey Access with Tap and Go CTAP2 protocol: Supports users and businesses in their journey to a passwordless experience. Passkeys are supported by >90% of devices, with a wide range supported across different operating systems and platforms.
- Compatible with Popular Password Managers: Supports popular tools, like Dashlane, LastPass (Premium), Keeper (Premium) and Roboform, through Tap and Go CTAP2 protocol to authenticate and automatically fill in usernames and passwords for websites.
- Great for Enterprise Deployments: Enables the latest web standards approved by the World Wide Web Consortium (W3C). Authenticates without storing passwords on servers, and secures the fingerprint data it collects, allowing it to support a company’s cybersecurity measures consistent with (but not limited to) such privacy laws as GDPR, BIPA, and CCPA.
Apple’s documented advantage of sudo_local is that this configuration persists across software updates. The template-copy and uncomment procedure comes from community guidance, so use the template shipped on your Mac and avoid treating the exact line or behavior as verified for every macOS release or environment.
If Touch ID does not appear
-
Confirm the local file exists and contains the uncommented
auth sufficient pam_tid.soline. -
Make sure Touch ID is configured for your Mac user and test from a local Terminal session. The available evidence does not establish behavior in every terminal app, remote session, or managed-device setup.
-
If the template or its contents differ on your Mac, follow that local template rather than forcing a line from another macOS version.
Quick Recap
Bestseller No. 1Bestseller No. 2Bestseller No. 3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
