1. A method, comprising: receiving, by a computing system, a user identifier and encrypted authentication data message from a user, the encrypted authentication data message comprising a biometric sample encrypted using an encryption key, the encryption key generated using a user secret factor within the biometric sample as an input to a password authenticated key exchange protocol; matching, by the computing system, the user identifier with a stored user secret; generating, by the computing system, a decryption key using the stored user secret as an input to the password authenticated key exchange protocol, the stored user secret retrieved based on the user identifier; decrypting, by the computing system, the encrypted authentication data message using the decryption key; extracting, by the computing system, the user secret from the biometric sample; authenticating, by the computing system, the user by matching the extracted user secret with the stored user secret; and authenticating, by the computing system, identity of the user by matching the decrypted biometric sample with a biometric reference template associated with the user identifier, wherein a subsequent communication with the user and the computing system is encrypted using the user secret factor, wherein the biometric sample includes each of the user secret and a biometric access phrase, and wherein extracting the user secret from the biometric sample includes parsing the user secret and the biometric access phrase.