Physiological biometrics: fingerprint, iris scan, retina scan, facial recognition, palm vein. Behavioral biometrics: voice recognition, keystroke dynamics (typing rhythm), gait analysis, mouse movement patterns.
Physiological = physical characteristics (stable). Behavioral = patterns over time (continuous authentication possible). Behavioral biometrics are passive — authentication happens continuously without user interaction. Combined with MFA they provide strong continuous identity assurance.