CyberGlossary

Identity & Access

Behavioral Biometrics

Also known as: Behavioral biometric authentication, Continuous biometrics

Definition

A continuous-authentication technique that profiles unique user behaviors — typing rhythm, mouse movements, gait, or touchscreen gestures — to detect impostors.

Behavioral biometrics measure how a person interacts with a device rather than what they look like. Models analyse keystroke dynamics, mouse trajectories, scrolling, swipe pressure, gait from mobile sensors, or even how a phone is held, and compare them to a behavioral baseline. The technique runs silently and continuously after login, so it can detect session hijacking, bot activity, or account takeover even when valid credentials are presented. It is widely used in fraud prevention for banking and e-commerce, often paired with risk-based authentication. Limitations include false positives from injury or stress, and privacy concerns around persistent monitoring.

Examples

  • A bank flags a session where typing cadence suddenly differs from the customer's baseline.
  • An e-commerce platform detects bot-driven account creation via inhuman mouse paths.

Related terms