Passkeys are the future of authentication, offering enhanced security and convenience over passwords, but widespread adoption faces challenges that the NCSC is working to resolve.

What’s wrong with passwords – why do we need passkeys?

Most cyber harms that affect citizens occur through abuse of legitimate credentials. That is, attackers have obtained the victim’s password somehow – whether by phishing or exploiting the fact the passwords are weak or have been reused.

Passwords are just not a good way to authenticate users on the modern internet (and arguably weren’t suitable back in the 1970s when the internet was used by just a few academics). Adding a strong – phishing-resistant – second factor to passwords definitely helps, but not everyone does this and not every type of Multi-Factor Authentication (MFA) is strong.


More

MobileIDWorld: Apple Introduces Cross-Platform Passkey Import/Export Features Across Operating Systems

Apple has announced significant enhancements to its operating systems that will implement secure import and…

Read More →

Techopedia: FIDO2 & Passkeys: The Future of Passwordless Authentication

Passwordless authentication has picked up in recent years. But the method drawing the most interest in…

Read More →

asmag Security & IoT: Passwordless authentication: From trend to ‘strategic imperative’

For modern IT or Internet users, logging in to a website or app using a…

Read More →


123280 Next