The UK government is set to introduce passkey technology for accessing its digital services later this year, replacing the current SMS-based verification system. The motivation for this transition has been to increase security, strengthen user experience, and achieve increased operational efficiency. Passkeys, unique digital keys tied to specific devices like phones or laptops, offer a faster login process and phishing-resistant authentication.
The Feds continue to argue that passkeys offer a more secure and less expensive alternative. Moving to passkeys would save the government tens of millions of pounds per year. Additionally, it would reduce time to login by an estimated one minute compared to the current username, password and SMS code process.
She underscored the importance of these emerging technologies, stressing how they will help the UK shore up its digital battleground.
"The rollout of passkeys across GOV.UK services marks another major step forward in strengthening the UK’s digital defences while improving the user experience for millions." - Feryal Clark
The shift to passkeys is part of an ongoing mission to defend UK people, by channelling the development of phishing-resistant authentication through modern mechanics. The government should strive to lead by example, setting the strongest precedent possible for the public and private sectors.
"Replacing older methods like SMS verification with modern, secure passkeys will make it quicker and easier for people to access essential services — without needing to remember complex passwords or wait for text messages." - Feryal Clark
"This shift will not only save users valuable time when interacting with government online, but it will reduce fraud and phishing risks that damage our economic growth." - Feryal Clark
Andrew Shikiar, the Executive Director and CEO of the FIDO Alliance, praised the UK government’s move to adopt passkeys. He argues that this step will safeguard citizens in the UK and make their government more secure and efficient.
"The UK government’s adoption of passkeys across its digital services reflects a profound decision that stands to protect UK citizens while providing the government with greater security and operational efficiency. By prioritising modern, phishing-resistant authentication, the UK is setting a strong example for both the public and private sectors in the UK and beyond." - Andrew Shikiar