Is the faceID/fingerprint only needed for setup or every time?

I can „forget“ a PIN in case someone tries to force me to send funds, don’t have that way out with biometrics.