Cool, um, specifically for cell phone devices - as Lightness Races in Orbit has mentioned in comments there - we would use like a combination of fingerprint (or

Cool, um, specifically for cell phone devices - as Lightness Races in Orbit has mentioned in comments there - we would use like a combination of fingerprint (or, face) auth. and plus a swipe pattern for 2FA. A different kind of problem develops from there, because even though that biometric data is "secured" and encrypted (has to be, right?) - your signature still becomes available to "sync" and other system services... We're, then, branded. No manufacturers and designers are taking steps to ensure that this kind of (deeply personal) data stays and functions strictly offline. ... As is the only way to keep your biometrics private (and truly secure). Keeping it isolated from network. So, what's the best way: a password, a passcode, to keep in your head - or, a universal identifier which may be "unhackable", but universally known - to whoever. This can be a legit concern, no? :-s EDIT: Right, sry, might've strayed off-topic there.