I'm using this to authorize sudo (and other things) with Apple Watch: https://github.com/insidegui/pam-watchid https://github.com/insidegui/pam-watchid ... an

I'm using this to authorize sudo (and other things) with Apple Watch: https://github.com/insidegui/pam-watchid https://github.com/insidegui/pam-watchid ... and my /etc/pam.d/sudo needs to be changed like this: # sudo: auth account password session auth sufficient pam_watchid.so (...) This needs to be applied after every system update. Apart of that, it works really well (I have very dry skin so touch ID works for me 50% on a good day)