UK's NCSC calls passkeys the default, says passwords are no longer fit for the purpose

""Passkeys should now be consumers' first choice of login," the UK cybersecurity authority said in a blog post, adding that passwords are "no longer resilient enough for the contemporary world.""

""Passkeys are a newer method for logging into online accounts which do much of the heavy lifting for users, only requiring user approval rather than needing to input a password. This makes passkeys quicker and easier to use and harder for cyber attackers to compromise," the NCSC added in the blog."

""Passkeys are resistant to phishing attacks and remove the risks associated with password reuse," the agency said."

"The NCSC said its analysis examines common techniques, including phishing, credential reuse, and session hijacking, and evaluates how credentials are exposed across their lifecycle, from creation and storage to use."

The UK's National Cyber Security Centre recommends passkeys as the default authentication method for businesses, citing their security and user-friendliness. Passkeys are now seen as a primary choice for consumers, as traditional passwords are deemed insufficient. They require user approval instead of password input, making them quicker and harder for attackers to compromise. The NCSC emphasizes that passkeys are resistant to phishing and eliminate risks associated with password reuse, contrasting them with traditional methods that remain vulnerable to attacks.

Read at InfoWorld