NCSC endorses passkeys as faster, more secure alternative to passwords

The National Cyber Security Centre (NCSC) has endorsed passkeys as a more secure and user-friendly alternative to traditional passwords. Managed by a device's credential manager, passkeys eliminate the need for users to remember complex login details. Authentication is completed using existing device security, such as biometrics or a PIN, making the process up to eight times faster than using a password with two-step verification.

A key benefit of passkeys is their inherent resistance to phishing, as they cannot be intercepted, reused, or stolen by malicious actors. The NCSC highlights that passkeys are consistently as secure as, or superior to, the strongest multi-factor authentication methods. By adopting the technology, users can significantly reduce the likelihood of successful account compromises by cyber criminals and nation-state actors. The NCSC recommends that the public prioritise passkeys over passwords wherever available to enhance personal security and strengthen the UK's collective national resilience against large-scale phishing attacks.

Training Announcement: The BCS Foundation Certificate in Information Security Management Principles (CISMP) is an entry-level programme aligned with ISO/IEC 27001 and Cyber Essentials that examines the fundamental concepts, technologies and principles of information security management. It provides attendees with practical knowledge of key concepts and techniques in risk management, security operations, and technical, physical, and environmental security. In addition, CISMP addresses legal and regulatory requirements, business continuity and disaster recovery planning, and emerging technologies. Find out more.