You can use apple watch for password managers and all macos passwords prompts. Does require an apple silicon mac iirc.

The main downside is it doesn't always recognize and it takes a few seconds to trigger. I'd love a separate touch id. But absent that the watch is quite useful.

there's a PAM that you can install that lets you use your Watch for superuser actions. i uninstalled it some years ago because it got kind-of old and Watch authentication is buggy anyway.