Biometric?
Since when has biometric become sane? I open the door to a shop and forget to wipe my fingerprints off the door handle. I had better change my authentication token. I buy a snack and take my Halloween mask off to eat it. My face is now on CCTV recordings in all the surrounding buildings. The office buys a really expensive retinal scanner that checks for a pulse. A thief takes your eye and tries to fool the scanner by squashing the eyeball. Do you care if the scanner spots the problem?
Biometric must not be inflicted on people capable of remembering their passwords.