UK.gov begins killing off passwords for 23 million users

The UK government is transitioning more than 23 million users away from traditional password authentication towards a new system called passkeys. This change is part of the broader One Login initiative, which aims to provide a single account for accessing government services. Passkeys can be accessed through biometric data (such as fingerprints or Face ID) or a device PIN, offering a more secure and faster alternative to entering a username, password, and a two-factor authentication (2FA) code.

The move is expected to save taxpayers approximately £600 daily, as passkeys are up to eight times faster than traditional methods and require no SMS text messages. Passkeys are also designed to be more resistant to phishing attacks, as they rely on cryptographic credentials specific to the website or app, rather than a password that can be stolen or reused.

Jonathon Ellison, director for national resilience at the UK's National Cyber Security Centre (NCSC), highlighted the phishing-resistant nature of passkeys, stating that these keys offer a strong deterrent for cybercriminals and save time for users by eliminating the risk of compromised login details.

Despite the benefits, passkeys remain optional, and users can continue using the traditional login method if they prefer. GOV.UK One Login, which already serves purposes like checking State Pension details, managing tax services, and accessing childcare support, is gradually encouraging the adoption of passkeys to enhance both the convenience and security of government services.

Digital Government Minister Stephanie Peacock emphasized the significance of this transition, noting that it not only streamlines the login process but also guards against fraud. While it remains uncertain whether the 23 million One Login users will fully embrace passkeys, the initial adoption rate of almost 10 percent of daily logins suggests a promising shift towards this more secure and efficient authentication method.