It's a mistake to use biometrics for authentication. Perhaps as weak identification it's acceptable.

It's a username, not a password. Because it's public, shared (you leave bits of bioinformation everywhere you go) and not deliberately changeable.

A password is none of those things.