Disclosed is a mobile device to provide continuous and discrete user authentication. The mobile device may include: a contextual sensor; a soft biometric sensor; and a processor. The processor may be configured to: implement a background authentication process in a continuous manner based upon a soft biometric input from the soft biometric sensor and a contextual input from the contextual sensor; determine an anomaly event; and based upon the anomaly event, request a discrete authentication input from the user.