Unlock Admin Powers with a Tap: Enable Touch ID for Sudo on Mac

Security Bite: Stop Typing Your Sudo Password, Use Touch ID Instead

Overview: This article discusses how to configure your Mac to use Touch ID for sudo commands in the Terminal instead of typing a password. This feature reduces the need for repeated password entry and enhances security and convenience.

Key Points:

• Benefits: Using Touch ID with sudo provides a quick, secure method of authentication without typing passwords.
• Security: Touch ID data is stored locally on the device in an encrypted form within the Secure Enclave, ensuring that it is not accessible to Apple or the operating system.
• Setup Steps:
  1. Copy Configuration File: Copy the default template configuration file provided by Apple to a new file called sudo_local using Terminal.

     sudo cp /etc/pam.d/sudo_local.template /etc/pam.d/sudo_local
     

  2. Edit Configuration File: Open the newly created sudo_local file in a text editor (e.g., nano).

     sudo nano /etc/pam.d/sudo_local
     

  3. Uncomment Line: Uncomment the line containing pam_tid.so by removing the # symbol.
  4. Verify Setup: Run a sudo command in a new Terminal session to test if Touch ID is prompted for authentication.
• Reverting: If you want to revert back to using a password, comment out the auth line again.

Conclusion: The setup process is straightforward and can be completed in a few minutes. Enabling Touch ID for sudo not only simplifies your workflow but also enhances security by leveraging biometric authentication.