---
title: "Approve agent sudo commands with Touch ID | Ian Nuttall"
description: "Enable touch ID for sudo commands"
canonical: "https://ian.is/post/sudo-touch-id"
language: "en"
---

# Approve agent sudo commands with Touch ID

Sep 2025 / 19,172 views / [via X](https://x.com/iannuttall/status/1967797514771562807)

claude code/codex pro tip:

enable touch ID for quick approval of sudo commands by your agents

[![](https://ian.is/media/tweets/1967714683697410235/12963432/689577c24980cea161c88a195ef0d0e163283ca153d3ae5d61448c86aa288821.jpg)**Armin Ronacher ⇌**@mitsuhiko](https://x.com/mitsuhiko)

> If you are using claude code/codex for system administration/debugging on your local mac I encourage you to enable the pam\_tid.so pam.d module. That enables touch ID for sudo which works even when an agent sudos.

![Image from the embedded X post](https://ian.is/media/tweets/1967714683697410235/1967714677519011840/629362cb82a9453c794b3018bafc9eef3bf6824c625789277c35cba73c3176c7.jpg)

## Ian's List

Join 15k\+ subscribers