I'm confused...how are authentication and "password-based" related? (Yes, passwords can establish who you are...just as biometrics or tokens can. Or they can b

I'm confused...how are authentication and "password-based" related? (Yes, passwords can establish who you are...just as biometrics or tokens can. Or they can be used in place ) Using Biometrics for claimed identity is a choice (I guess...it's not one I've heard of before), not a mandate. 2FA doesn't specify what factors line up with with "claimed identity" vs "confirmed identity" - just that 2 factors is more secure than 1 factor. I've never heard of "used biometrics as username, and a password as password", nor that "biometrics are meant as username replacement". Have I fallen behind, or am I misunderstanding you? My understanding is that, in CONFIRMING identity, you want at least two of "know something, have something, be something". Every example I've heard/seen (admittedly limited) used these to confirm a claimed identity, not to make the claim in the first place.