For people complaining that this gets reset by macOS updates, I think this should work (I haven't tested this on macOS, but it works for me on Arch Linux): 1.

For people complaining that this gets reset by macOS updates, I think this should work (I haven't tested this on macOS, but it works for me on Arch Linux): 1. Copy /etc/pam.d/sudo to /etc/pam.d/customsudo and add "auth sufficient pam_tid.so" to that file instead. 2. Create the directory /etc/sudoers.d/ if it does not exist 3. Create the file /etc/sudoers.d/customtouchid with the following content: Defaults pam_service=customsudo You may need to set the right permissions on /etc/sudoers.d/customtouchid before sudo will accept it.