diff --git a/nix/modules/system/sudo.nix b/nix/modules/system/sudo.nix
index 1c9b560..55b32ee 100644
--- a/nix/modules/system/sudo.nix
+++ b/nix/modules/system/sudo.nix
@@ -8,4 +8,9 @@ in
     nix.settings.trusted-users = [ "@wheel" ];
     users.users.${cfg.admin.username}.extraGroups = [ "wheel" ];
   };
+  flake.modules.darwin.default.security.pam.services.sudo_local = {
+    enable = true;
+    reattach = true;
+    touchIdAuth = true;
+  };
 }