I see this argument a lot, but I don't really see it accompanied by an argument about what the passwords should be. Companies are gravitating toward biometric authentication methods because consumers have "password fatigue". They can't memorize a long secure password for every site, app, and device, so they resort to using a single password everywhere (which may or may not be displayed on a postit note stuck to their monitor).

All this article offers is:

> For authentication, you need a password or passphrase. Something that can be independently chosen, changed, and rotated.

Okay, so fingerprints aren't passwords, but what we need instead are passwords, which we know don't work either. Best practices for password security are ignored by consumers because they're onerous, and biometric authentication seems to be insecure by default. What's the solution then?