Security issues of writing a custom principal

In my application I need to pass username, id when I log in. so I read a tutorial that taught me how to create a Custom Principal which I use instead of the Identity object. So I am current using it in the FormsAuthentication. But I dont know if it is secured. Please I need advice on security risk that one could face when creating his own custom principal. so I can check my codes against this.
...