Security works in layers
Passwords can be guessed, reused, phished, or leaked. Biometrics may improve convenience and assurance, but they also introduce privacy, spoofing, accessibility, and recovery risks. No biometric technology is literally impossible to copy.
- Use multi-factor authentication and, where supported, phishing-resistant passkeys.
- Keep biometric matching on-device when feasible.
- Provide secure recovery paths and alternatives for accessibility.
- Minimize storage of biometric data and document retention.
Research direction
Microvascular and higher-resolution fingerprint sensing may be evaluated in the future only with validated hardware, explicit consent, liveness testing, and independent review.