[dragonwriter]

> fingerprints are usernames, not passwords

While the article you linked to points out correctly why they aren't good as passwords, they also aren't good as usernames (though they may be good as an alternative by which a username is looked up, with a fallback to using the real username), since they can be destroyed.

[ben-schaaf]

Another reason they aren't good usernames is that they are not unique. Almost unique isn't good enough for uniquely identifying a user.

[_red]

"Searching" on fingerprints is difficult to scale as users move from tens to thousands.

The best system is:

1. User inputs username.

2. Fingerprint is used to confirm username.

3. User inputs password.

[tectec]

Palm prints were used at a nuclear facility I visited as an alternative to fingerprints in step 2. After you scan your id card you scan your palm print and the system verifies the palm matches the one that is registered with the card. They are not as unique as finger prints but it makes it much more difficult to use someone else's card (or username).

[dragonwriter]

If you use fingerprint to confirm username, you have to have an alternate means to do that, because fingerprints can be destroyed.