- What: UK's NCSC endorses passkeys as a secure alternative to passwords
- Impact: Shift in digital security recommendations for consumers
Identity , Government security UK’s NCSC endorses passkeys over traditional passwords April 24, 2026 Share By SC Staff The UK's National Cyber Security Centre (NCSC) has officially endorsed passkeys as a superior alternative to traditional passwords. This endorsement signifies a major shift in digital security recommendations, moving away from password-based authentication. The NCSC now advises consumers to make passkeys their first choice for logging into digital services, according to a recent report by Tech Radar. Passkeys utilize device-stored cryptographic keys, often unlocked via biometrics, offering enhanced security compared to even strong passwords with two-step verification. The NCSC's technical report indicates that passkeys are at least as secure, and generally more secure, than the strongest password combined with two-factor authentication. Major platforms like Google, eBay, and PayPal have already integrated this technology, with over 50% of active Google services users in the UK reportedly registered with a passkey. The technology, introduced in 2022, faced initial implementation challenges but has seen significant industry progress in the past year. Source: Tech Radar SC Staff Related Security Operations UK Biobank volunteer data appears on Alibaba SC Staff April 24, 2026 The discovery was revealed by UK technology minister Ian Murray in the House of Commons on Thursday, coinciding with Biobank's own confirmation of the data issue. Government Regulations House GOP eyes nationwide rules on data collection SC Staff April 23, 2026 CyberScoop reports that House Republicans have introduced a draft national digital privacy bill aimed at establishing business and consumer data protections against exploitation for advertising and other purposes. Data Security Unsecured database exposes Three Trees customer, delivery driver data SC Staff April 23, 2026 California-based marijuana delivery service Three Trees had data from at least 40,000 individuals leaked as a result of a misconfigured MongoDB database, Cybernews reports. Related Events Cybercast IAM for MSSPs: Real-World Deployments Mon May 18 Cybercast Privilege risk is in the lifecycle: A CISO discussion on modernizing identity control On-Demand Event Cybercast The industrialization of identity compromise On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Basic Authentication Biometrics Certificate-Based Authentication Challenge-Handshake Authentication Protocol (CHAP) Digest Authentication Digital Certificate Discretionary Access Control (DAC) You can skip this ad in 5 seconds