---
title: "Approve agent sudo commands with Touch ID"
description: "Enable touch ID for sudo commands"
canonical: "https://ian.is/sudo-touch-id"
language: "en"
---

[Ian Nuttall](https://ian.is/)

# Approve agent sudo commands with Touch ID

September 16, 2025

claude code/codex pro tip:

enable touch ID for quick approval of sudo commands by your agents

[![](https://ian.is/media/tweets/1967714683697410235/12963432/689577c24980cea161c88a195ef0d0e163283ca153d3ae5d61448c86aa288821.jpg)**Armin Ronacher ⇌**@mitsuhiko](https://x.com/mitsuhiko)

> If you are using claude code/codex for system administration/debugging on your local mac I encourage you to enable the pam\_tid.so pam.d module. That enables touch ID for sudo which works even when an agent sudos.

![Image from the embedded X post](https://ian.is/media/tweets/1967714683697410235/1967714677519011840/629362cb82a9453c794b3018bafc9eef3bf6824c625789277c35cba73c3176c7.jpg)

## Newsletter

Join 9.2k subscribers