Pass the key, passwords have passed their sell-by date

The UK's National Cyber Security Centre (NCSC) has officially recommended passkeys as the default authentication method, stating they are at least as secure and generally more secure than passwords plus two-step verification; the agency cited improved platform support and adoption by major providers and urged organizations to adopt passkeys while continuing to use password+2SV and password managers where passkeys are not yet available.