They say all good things come in threes, and identity authentication is no exception to this rule. There are three main forms of approach when it comes to verifying an identity: what you have (e.g. an ID card), what you know (e.g. a password or PIN), and what you are (e.g. biometrics).