UK’s NCSC endorses passkeys over traditional passwords

The UK's National Cyber Security Centre (NCSC) has officially endorsed passkeys as a superior alternative to traditional passwords. This endorsement signifies a major shift in digital security recommendations, moving away from password-based authentication. The NCSC now advises consumers to make passkeys their first choice for logging into digital services, according to a recent report by Tech Radar.

Passkeys utilize device-stored cryptographic keys, often unlocked via biometrics, offering enhanced security compared to even strong passwords with two-step verification. The NCSC's technical report indicates that passkeys are at least as secure, and generally more secure, than the strongest password combined with two-factor authentication.

Major platforms like Google, eBay, and PayPal have already integrated this technology, with over 50% of active Google services users in the UK reportedly registered with a passkey. The technology, introduced in 2022, faced initial implementation challenges but has seen significant industry progress in the past year.

Source: Tech Radar