CYBERSECURITYTRACKER
Permanent story citation

UK.gov begins killing off passwords for 23 million users

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7225

As cited

Copy frozen at (site build).

breaches incidents

UK.gov begins killing off passwords for 23 million users

The UK government is expanding passkey support across GOV.UK One Login to 23 million users following a successful trial, allowing authentication via biometric or device PIN instead of passwords and two-factor authentication (2FA) codes. Passkeys are cryptographically tied to specific services and resist phishing attacks since biometric data or PINs remain on the user's device. The rollout already accounts for nearly 10 percent of daily logins and saves taxpayers approximately £600 daily in SMS costs, though passwords remain optional for now.

Why it matters: UK residents using government services should evaluate passkeys as a phishing-resistant alternative to passwords, while security practitioners can reference this deployment as a real-world case study in reducing SMS 2FA costs and improving user authentication resilience.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary