tboyd47 is talking about browser/device fingerprinting, not physical fingerprints. Such fingerprints are usually attached to device rather than the specific account, but if we assume that a user needs a secure password/login to access the device, it might be a workable proxy.

[1]: https://en.wikipedia.org/wiki/Device_fingerprint [2]: https://panopticlick.eff.org/