Top News

Password Vs. Passkey: If you are currently relying on passwords to secure your devices or accounts, this method is now considered outdated. Passwords—first introduced in 1961—have officially 'retired.' The UK's National Cyber ​​Security Centre (NCSC) has announced that it will no longer recommend the use of passwords as a means of staying safe online. This marks the first time a major intelligence agency has declared passwords obsolete. The NCSC advises that individuals should now utilize 'passkeys' to ensure their online safety. Let's explore what a passkey is and why its usage is being recommended.

What is a Passkey?

A passkey is created through the combination of a Public Key and a Private Key. Essentially, a passkey generates a unique pair of digital credentials linked to the physical security key of your phone, laptop, or other devices. One part of this pair remains stored locally on your device, while the other is shared with the website or service you are accessing. Subsequently, your device authenticates your identity using methods such as a fingerprint scan, facial recognition, or your device's screen lock. With this system, you neither need to memorize a password nor are you required to type anything out.

How Are Passkeys Superior to Passwords?

The NCSC asserts that passkeys are faster than passwords. Logging in using a passkey is up to eight times faster than typing out a traditional password.

Passkeys are extremely difficult to guess. While passwords can often be guessed or cracked, this is not possible with passkeys; consequently, the risk of falling victim to phishing scams is eliminated.

The NCSC also notes that passkeys do not require the use of One-Time Passwords (OTPs). As a result, companies can save millions in operational costs typically incurred for sending authentication messages. Creating a strong password requires the use of various numbers, letters, and special characters—elements that can be difficult to remember. Passkeys eliminate this hassle entirely, as they require you to memorize absolutely nothing.

Companies, Too, Are Emphasizing Passkeys

Beyond the NCSC, numerous companies have now begun to place a strong emphasis on passkeys. This shift stems from the fact that, amidst the rising tide of cybercrime, traditional passwords no longer offer adequate security. Consequently, new methods for user authentication and login are now being adopted. Some time ago, Microsoft removed password support from its Authenticator app, replacing it with support for passkeys. Similarly, Amazon is also actively encouraging the use of passkeys.