Biometric data, such as fingerprints, iris scans, or facial recognition, is unique to an individual and cannot be changed. If biometric data is compromised, it cannot be revoked or reissued like a password or smartcard. This makes biometric authentication both highly secure and highly vulnerable if compromised, as the biometric traits used for authentication are permanent and unique to the individual.