The UK government is revolutionizing digital access to public services by implementing passkeys across the GOV.UK One Login platform. This significant shift affects over 23 million users, providing a passwordless option for accessing essential services.
Streamlining Access to Public Services
This new system spans a range of services, from childcare support and driving license renewals to State Pension checks and tax management. The initiative is a major step towards enhancing the way citizens authenticate when using government digital platforms.
Instead of the conventional method of passwords and one-time text codes, users can now opt for biometrics or device-specific PINs and patterns. This change is set to improve the user experience significantly.
Enhanced Security Measures
Officials highlight that passkey authentication is notably quicker, reportedly up to eight times faster than the traditional username, password, and two-factor verification methods. This follows a successful trial where over 300,000 users adopted the new system.
Statistics reveal that nearly 10% of daily authentications on GOV.UK One Login are now completed using passkeys, leading to a daily reduction in SMS verification costs by approximately £600. The new authentication method is based on the FIDO2 standard, offering a robust defense against credential phishing attacks.
The Future of Authentication
The National Cyber Security Center endorses passkeys as a safer alternative. Unlike passwords, passkeys cannot be intercepted or reused, enhancing security. Biometric data remains on the user’s device, adding another layer of privacy protection.
Passkeys can be synchronized across devices, and users can authenticate on different devices by scanning a QR code. However, the option to use passwords remains available for those who prefer it.
Digital Government Minister Stephanie Peacock emphasizes that passkeys will improve service access speed while bolstering security against fraudulent activities. NCSC Director Jonathon Ellison also advocates for the adoption of passkeys, describing them as a superior phishing-resistant solution.
While the government aims to reduce operational costs and improve user experience, the availability of password-based recovery continues to necessitate secure fallback mechanisms. As passkey adoption grows, ongoing security measures will be essential in maintaining safe account access.
