[Company name]

The NCSC to begin recommending use of passkeys

Talk to an expert

The National Cyber Security Centre (NCSC) announced at CYBERUK 2026 in Glasgow that it will begin recommending the use of passkeys wherever a service supports them, and two-step verification (2SV) where it does not.


A passkey is a way to sign in that does not use a password. Instead, your account is linked to a device you own, such as a phone or computer. When you log in, the service asks your device to confirm it is you, and you approve this by unlocking the device with a fingerprint, face scan or PIN.


Based on analysis carried out by the NCSC, it has been concluded that passkeys provide stronger protection for users than traditional 2SV, which can be vulnerable to phishing. According to the NCSC, phishing is one of the most persistent causes of cyber compromise.


The NCSC point out that, as with any security control, passkeys need to be implemented and used sensibly to be most effective. Users will still depend on the security of their devices and credential managers.


See: https://www.ncsc.gov.uk/blogs/passkeys-are-more-secure-than-traditional-ways-to-log-in

September 16, 2026
Big changes to the Apprenticeship Levy

The Apprenticeship Levy has undergone its biggest overhaul since its introduction, with major changes taking effect from 1 August 2026. For Small to Medium-sized Enterprises (SMEs), the most significant development is the expansion of what levy funds can be used for under the new Growth and Skills Levy. This expansion comes alongside tighter funding rules, making planning more important than ever.

Read article
September 14, 2026
Chancellor promises to cut red tape and boost growth

The Chancellor, John Healey, has given a number of speeches explaining how he intends to boost growth, reduce red tape and maintain fiscal responsibility.

Read article