diff --git a/system/darwin/sudo.nix b/system/darwin/sudo.nix
new file mode 100644
index 0000000..12f20cd
--- /dev/null
+++ b/system/darwin/sudo.nix
@@ -0,0 +1,3 @@
+{
+  security.pam.enableSudoTouchIdAuth = true;
+}
diff --git a/system/hosts/Styx.nix b/system/hosts/Styx.nix
index 0f09c85..ae01ae4 100644
--- a/system/hosts/Styx.nix
+++ b/system/hosts/Styx.nix
@@ -9,6 +9,7 @@ in
   imports = [
     ../darwin/defaults.nix
     ../darwin/fonts.nix
+    ../darwin/sudo.nix
   ];
 
   nix = {