[er0k]

or just use a yubikey... it costs ~$50

[xoa]

This comment could use some elaboration. For those that don't know you can use a Yubikey that supports PIV as a smart card for logging into macOS and performing a range of admin authentication operations with just the PIN, not just in the GUI but sudo as well (and of course more directly for SSH etc). It's not a perfect substitute, no ApplePay, but it means you can have a long complex password and only need a 6-8 digit PIN for most usage while still being pretty safe, and has some positives of its own in a multiuser or machine environment. It's a very reasonable option to consider IMO, even though yes it'd absolutely be nice if Apple did better on the hardware auth front.

[amanzi]

Your comment just reminded me I can use my Yubikey to unlock my Linux laptop but hadn't set this up yet. I've been typing my password each time like an animal! Thanks. :-)

[rcarmo]

Doesn’t really work with Apple’s own stuff. At least I never got it to work.

[47282847]

That’s not a biometric TouchID. Any touch by anyone will trigger it.

[mingus88]

Yubikey Bio exists. It’s $100 though so, whether it not it’s worth integrating into MacOS vs a first party keyboard is going to be subjective