For years, passwords have been one of the main ways we protect our online accounts. From banking and email to shopping and social media, we rely on passwords every day to keep our personal information safe.
But passwords also come with challenges. Many people reuse the same password across multiple accounts, choose passwords that are easy to remember (and therefore easier for criminals to guess), or forget them altogether and need to reset them.
As technology continues to evolve, a new type of security method called a passkey is becoming more common. Passkeys are designed to make signing in easier while also providing stronger protection against many common scams and cyber threats.
What is a passkey?
A passkey is a secure way to sign in to an account without needing to type in a traditional password. Instead of remembering a password, passkeys use technology already built into many devices, such as your phone, tablet or computer. This could include your fingerprint, facial recognition, a device PIN or another method used to confirm that you are the person trying to access your account.
When you create a passkey, your device creates a unique digital key that is linked to that specific account. One part of the key is stored on your device, while the other part is stored by the service you are signing into.
The important thing is that your actual login information is not shared when you sign in. Your fingerprint, face scan or PIN simply helps confirm that you are authorised to use the device.
Why are passkeys becoming more popular?
One of the biggest reasons passkeys are gaining attention is because they can help address some of the weaknesses of traditional passwords.
Passwords can be stolen in many ways. Criminals may use phishing emails, fake websites or data breaches to trick people into revealing their login details. For example, you might receive a message that appears to be from a well-known company asking you to “verify your account” by clicking a link. The website may look legitimate, but it could be designed to steal your username and password.
Passkeys are designed to help prevent this type of attack because there is no password for a scammer to capture. A passkey is also linked to the legitimate website or app it was created for, making it much harder for criminals to use fake websites to steal your login details.
The benefits of using passkeys
1. Stronger protection against scams
Many cyber criminals rely on people sharing their passwords through fake emails, messages or websites. Because passkeys do not require you to enter a password when signing in, they can help reduce the risk of your login details being stolen through phishing scams.
2. No more remembering multiple passwords
Keeping track of dozens of passwords can be difficult. Many people solve this problem by using the same password across multiple accounts, which can create a bigger security risk. If one account is compromised, criminals may try using those same details to access other accounts.
Passkeys can make signing in easier because you do not need to remember a different password for every account.
3. Faster and easier sign-ins
Instead of typing a long password, signing in with a passkey may only require a fingerprint, facial recognition or a quick device check. This can make accessing accounts more convenient while still maintaining strong security.
4. Less risk from data breaches
Large-scale data breaches can expose usernames and passwords stored by companies. Passkeys work differently because they use encrypted technology rather than simply storing a password that can be leaked.
Are passwords disappearing completely?
No, passwords are still widely used and it will take time for passkeys to become available across all websites and services. Many organisations are currently offering passkeys as an additional sign-in option alongside traditional passwords. Over time, more businesses are expected to adopt passkey technology as it becomes more common.
It’s also important to remember that good security habits still matter. Even with passkeys, you should continue to keep your devices updated, use multi-factor authentication where available, and be cautious about suspicious messages or links.
How can you start using passkeys?
If passkeys are available for an account you use, you may be able to set one up through the account’s security settings. Many newer smartphones, tablets and computers already support passkey technology.
As more of our everyday activities move online, protecting our personal information is becoming increasingly important. Passkeys offer a simpler and potentially safer way to access accounts by reducing reliance on traditional passwords.
While passwords are unlikely to disappear overnight, passkeys could become an important part of the future of online security, helping make it easier for people to protect their digital lives.
This information provides general advice only. We do not provide advice based on any consideration of your personal objectives, needs or circumstances.
