Biometric identifiers are physical or behavioral traits used to recognize a person, such as fingerprints, facial geometry, voice prints, iris patterns, or even typing rhythm. Unlike passwords or account numbers, these traits are tied to the human body or behavior, so they are harder to change once exposed.
In cyber security, that permanence makes biometrics sensitive. If attackers steal biometric templates or raw scans, the damage can outlast the breach because a victim cannot simply “reset” a fingerprint. Biometrics may be used for device unlock, identity verification, access control, and fraud prevention, but they also create privacy and compliance risk when stored with other personal data. Defenders reduce exposure by minimizing collection, encrypting templates, separating them from other records, and using liveness and anti-spoofing checks. In attacks, biometric data may be stolen from poorly protected databases, intercepted from enrollment systems, or used in identity fraud and account takeover attempts.