Skip to content
PAM plugin module that allows the Apple Watch to be used for authentication
Swift Makefile
Branch: master
Clone or download
#3 Compare This branch is 4 commits ahead of Reflejo:master.
Latest commit c969f1b Sep 23, 2019
Type Name Latest commit message Commit time
Failed to load latest commit information.
.gitignore Remove `-static-stdlib` option for Swift 5. May 10, 2019
LICENSE Initial commit Nov 30, 2016
Makefile Update TouchID repo to use new LA API to authenticate with watchOS Jun 18, 2019 Update README Jun 18, 2019
demo.gif Update README Jun 18, 2019
watchid-pam-extension.swift Improved error handling Sep 23, 2019


A PAM plugin for authenticating using the new kLAPolicyDeviceOwnerAuthenticationWithBiometricsOrWatch API in macOS 10.15, written in Swift.


  1. $ sudo make install
  2. Edit /etc/pam.d/sudo to include as the first line: auth sufficient "reason=execute a command as root"

Note that you might have other auth, don't remove them.

You can’t perform that action at this time.