diff --git a/configs/macos/enable-touchid-sudo.sh b/configs/macos/enable-touchid-sudo.sh
new file mode 100644
index 0000000..e00d254
--- /dev/null
+++ b/configs/macos/enable-touchid-sudo.sh
@@ -0,0 +1,4 @@
+#! /bin/bash
+# Run this script to enable sudo with Touch ID
+
+sed "s/^#auth/auth/" /etc/pam.d/sudo_local.template | sudo tee /etc/pam.d/sudo_local