As with fingerprints, your password is always the primary authentication method. The fingerprint / heartbeat authentication support is there as an alternative; to be "cool", take longer than typing your password, and make it easier for intruders to access your device.