Ideally, passwords should change over time as well. If the change is continuous rather than abrupt, it can be picked up on, and the password steadily changed with the pattern (you'd be let in with an 98% match, which would then overwrite the previous pattern. A 95% match would ask for secondary identification first). Then, if someone tries to use a previous recording of your heartbeat to unlock your computer, it won't work!