It’s time to ditch passwords for passkeys

People in the UK have been urged to start ditching passwords in favour of passkeys, where available, as a way to secure their accounts online.

Passwords have long been the default way many people set up and log in to accounts for digital services.

However, the National Cyber Security Centre (NCSC) said on Thursday it was “overhauling decades of security practice” to instead recommend passkeys as the most secure option.

Platforms including Apple, Google and X already let people use them instead of passwords, but what are passkeys, and how do they work?

The advice comes after years of warning people against using simple codes which can easily be guessed, like “123456”, as well as pet names, as passwords.

Against a backdrop of rising data breaches, the NCSC has also repeated warnings against reusing the same password for different sites.

Password managers and multi-factor authentication (MFA) methods have grown in usage as a way to help strengthen and save log-in credentials.

The NCSC believes passkeys may be less vulnerable to hacks and human error, but some experts say they are still “not a silver bullet”.


More

Science Friday Podcast: How To Make Spoof-Proof Biometric Security

On this episode of the Science Friday Podcast, Stephanie Schuckers, director of the Center for…

Read More →

MakeUseOf: Beware This New Login Scam (And How to Protect Yourself From Hacks)

With a new login scam hitting users, MakeUseOf suggests using FIDO security keys for protection…

Read More →

Take On Payments: FIDO Tightens Authentication’s Leash

This post from the blog Take On Payments, sponsored by the Retail Payments Risk Forum…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.