Interesting. I've actually never enabled biometrics on it just as a precaution, and it's a different passcode than the phone, plus I use a random set of chars as the username like many others do.