The National Cyber Security Centre (NCSC) recommends users opt for passkeys over passwords wherever they are available. They are more secure and easier to use.
Passkeys are a more secure alternative to passwords that you don’t need to remember as they are created and managed safely by the software on your device(s).
The digital industry is moving rapidly towards offering passwordless authentication for logging into online services and accounts, and many major platforms already support it.
How do I set up and use a passkey?
An online service may prompt you to add a passkey to your account after you sign-in or when revisiting the site or app. If you’re not automatically prompted to add a passkey, then you can often find the option in your ‘Account settings’.
Passkeys are created, saved, stored and managed for you on your trusted device(s) – such as your smartphone, tablet or computer – by your chosen credential manager (also known as a ‘password manager’). This will most likely be the default one built in to your device – such as Apple Passwords, Google Password Manager or Samsung Pass – unless you have specifically chosen to install and use a third-party one, for example, to synchronise passwords across different browsers and devices.
If passkeys aren’t available
Passwords have been the cornerstone of online security for decades, helping to protect our digital identities and sensitive information from unauthorised access. Users shouldn’t simply forget all their passwords or attempt to set up accounts without any form of security.
Where passkeys are not an available option, you should continue to use strong passwords, for example generated by a password manager and enable 2SV. This remains a resilient defence against online attackers.
Want to know more
The NCSC website offers:
Other ways to protect yourself
Learn further steps to protect yourself and others from fraud.