Use TouchID for sudo sudo vi /etc/pam.d/sudo # add first line: auth sufficient pam_tid.so If using iTerm2: Turn off Prefs > Advanced > Allow sessions to survive logging out and back in..