Multifactor authentication methods have been developed to raise the security of user authentication by integrating smart card, fingerprint and password. Nevertheless, currently available authentication schemes cannot effectively avoid specific attacks, such as authentication data being stolen by internal staff For example, the attacker can get the fingerprints of the user from the imprint cup of biometric capture sensors. Therefore, we propose a variant-based remote authentication scheme using rotor machine concept where the biometric template is encrypted and altered arbitrarily by users to avoid the fingerprint template being stolen. If the encrypted fingerprint template is lost, the user can set a novel string and generate a new encrypted one, and the original template becomes invalid, so hacker or internal staff cannot use it as a legal identity to pass the liveness test. Furthermore, we show that the proposed scheme is a secure scheme and is immune to four types of network attacks via security analysis for smart home applications.