Biometric authentication verifies a person with a fingerprint, a face, or a typing rhythm instead of a secret they can tell someone else.
The trait is stable and personal, which helps convenience, and it also means you cannot rotate it the way you rotate a password after exposure.
How it works
A sensor turns the trait into a template that should stay on a device or in a protected store, not travel as a raw image in ordinary logs.
Matching is probabilistic, so systems need a careful balance between rejecting the real person and accepting an impostor.
Photos, recordings, and replicas can pressure weak sensors, so high value actions still pair biometrics with a device or a second factor.
Privacy duties apply because the measurement is tied to a body, and retention should be shorter and narrower than for ordinary account data.
Concrete examples
- A phone unlocks when it recognizes the owner's face, and a banking app then asks for that same local check before a transfer.
- A shared kiosk rejects a fingerprint that is wet or injured, so the person must have a backup method that is still strong.
- A call center that trusts a voice clip without other proof accepts a recording instead of the real customer.
Protective measures
- Pair biometrics with a device you control or with another factor before you allow payments, mail changes, or remote administration.
- Store templates in protected hardware where you can, and do not keep raw face or fingerprint images in ordinary application logs.
- Offer a fallback that is still strong, and do not drop high value accounts to a weak secret when the sensor fails.
- Tell people what trait you measure, how long you keep the template, and how they can challenge a bad match.
Related articles
The article What is authentication in security? sets biometric checks inside the wider question of proving who is asking.
The article What is bring your own device? covers personal devices whose built in sensors often perform these checks.
The article What is corporate account takeover? shows why a business login may still need more than a single body trait.