[anonym29]

Biometrics are the only credential you can't roll after compromise.

[lostlogin]

It depends what the biometrics are. There have been successful hand transplants, so new finger prints are possible, but completely impractical.

https://en.wikipedia.org/wiki/Hand_transplantation

[ntoskrnl_exe]

Thinking about it, I probably wouldn't remember to change my fingerprints to the new ones with all the services I use, I'd probably have to carry my "legacy fingerprints" wherever I go for some time to avoid a lockout.

[tombrandis]

kind of but others are hard as well... most people don't change their name, date of birth or even email address when they are leaked.

[anonym29]

These aren't really "credentials" in that they're not secret the way your iris/retina pattern, fingerprint pattern, password, pin, secret key, or security token are.

Your name, DoB, and email address are identifiers, yes, but aren't really authenticators - they're more like a username, not a password.

[artursapek]

this is exactly my problem with them