UK government rolls out passkeys for 23 million users

The United Kingdom government is expanding the use of passkeys through the GOV.UK One Login system, aiming to provide a more secure and efficient authentication method for over 23 million users. Following a successful trial with 300,000 users, passkeys allow individuals to access public services using device-based biometrics, such as fingerprints or facial recognition, or a device PIN, rather than traditional passwords and SMS-based two-factor authentication.

This transition offers both security and economic benefits. Passkeys are designed to be highly resistant to phishing because they use cryptographic credentials tied to specific websites rather than easily stolen text-based passwords. Additionally, the government reports that the shift is saving taxpayers approximately £600 per day by reducing the costs associated with sending authentication SMS messages.

While the National Cyber Security Centre (NCSC) is encouraging the switch, passkeys remain an optional feature. The GOV.UK One Login project, which began in 2021, seeks to consolidate the various authentication systems previously used across different government departments into a single, unified entry point.