Users advised to drop passwords and make room for passkeys

The UK National Cyber Security Centre (NCSC) is urging consumers and organizations to adopt passkeys instead of passwords, publishing technical guidance that outlines the security benefits, implementation guidance, recovery considerations, and vendor support (e.g., Microsoft, Google, Okta). The guidance notes passkeys reduce phishing risk and recommends password managers and two-step verification where passkeys are unsupported.