Passkeys are being rolled out across GOV.UK One Login,
giving more than 23 million users a faster and more secure way to
access government services, such as accessing childcare services
or renewing their driver's licence.
A passkey lets people securely sign in using their fingerprint,
Face ID or PIN instead of a password. This means people can
access services without having to remember or type a password.
Passkey logins are up to 8 times faster than signing in with
username, password and 2-step verification code.
More than 300,000 users successfully switched to passkeys during
the initial trial, and they are now being made available to
millions more GOV.UK One Login users. Nearly one in 10
daily GOV.UK One Login sign-ins are now made using
passkeys, helping to save the British taxpayer nearly £600 a day
in SMS costs.
Passkeys can also help protect people from phishing and other
cyber threats. Because they are tied to a specific device and
website, passkeys cannot be guessed or reused, and there is no
password for scammers to steal through a phishing email or fake
website.
The biometric or PIN information used to unlock a passkey stays
on the user's device and is not seen or stored
by GOV.UK One Login.
Digital Government Minister said:
Nobody enjoys hunting for a forgotten password or waiting for a
text message code just to check their tax return or renew a
document. Passkeys mean people can access the services they rely
on in seconds, using the same fingerprint or face scan they
already use to unlock their phone.
This is about making government services simpler and safer for
everyone, while giving people stronger protection against the
fraudsters who target passwords.
GOV.UK One Login provides access to a growing range of
government services, including checking a State Pension, managing
tax services and accessing childcare support.
The National Cyber Security Centre recommends passkeys as a more
secure alternative to passwords, because they can't be
intercepted, reused or stolen.
Jonathon Ellison, NCSC Director for National Resilience said:
The introduction of passkeys for GOV.UK One Login will
give users a faster, simpler and more secure way to sign in to
many public-facing government services while leaving password
headaches behind.
Cyber criminals often look for the easiest route to access
important accounts, which means login details remain a common
target. But passkeys offer a highly phishing-resistant
alternative to passwords, frustrating attackers and saving the
public time.
We strongly encourage users to set up a passkey
for GOV.UK One Login and to do so wherever passkeys are
available across digital services. By taking this small but
significant step, you can help protect your online accounts and
raise our collective resilience, making the UK safer.
Passkeys are optional, so people can continue to use a password
to sign in if they prefer. Those who choose to set up a passkey
can use their device's existing security features to
access GOV.UK One Login quickly and securely.
Notes to editors
-
Passkeys use device-based security such as Face ID,
fingerprint, or PIN, instead of a password.
-
The technology is recommended by the National Cyber Security
Centre as more secure and easier to use than passwords.
-
For more information on how passkeys work, visit
the guidance on
GOV.UK and information on the NCSC
website.
