UK Government Accelerates Passwordless Login with Passkey Rollout for 23 Million Users

The UK government is significantly expanding its adoption of passkeys for the GOV.UK One Login system, a move that could see over 23 million users transition away from traditional passwords. This initiative, building on a successful trial with more than 300,000 users, allows individuals to authenticate using biometric data like fingerprints or facial recognition, or by using their device's PIN, thereby bypassing the need to enter passwords and wait for two-factor authentication codes.

This shift towards passkeys is not only about improving user experience but also about bolstering security and reducing operational costs. The government reports that passkeys are already being used for nearly one in ten daily sign-ins to GOV.UK One Login and are estimated to be up to eight times faster than conventional login methods. Furthermore, the transition is projected to save taxpayers approximately £600 per day by reducing reliance on costly SMS authentication.

From a security perspective, passkeys offer a substantial upgrade over passwords. Unlike passwords, which can be easily phished, reused across multiple sites, or compromised through data breaches, passkeys utilize cryptographic credentials uniquely tied to the specific website or application. The sensitive authentication data, such as fingerprint or facial scans, remains securely on the user's device and is never transmitted to or stored by the government's systems, making them inherently more resistant to phishing attacks.

Jonathon Ellison, director for national resilience at the UK's National Cyber Security Centre (NCSC), emphasized the security benefits, stating, "Cyber criminals often look for the easiest route to access important accounts, which means login details remain a common target. But passkeys offer a highly phishing-resistant alternative to passwords, frustrating attackers and saving the public time." The NCSC is actively encouraging users to adopt passkeys, although the option to continue using passwords remains available for those who prefer it.

The GOV.UK One Login system is designed to consolidate access to various government services under a single account, eliminating the need for users to manage multiple sets of credentials for different portals. It currently facilitates access to services such as State Pension management, tax services, and childcare support applications.

Digital Government Minister Stephanie Peacock highlighted the dual benefits of the rollout, noting, "Nobody enjoys hunting for a forgotten password or waiting for a text message code just to check their tax return or renew a document." The government aims to make its digital services more accessible and simultaneously more secure against fraudulent exploitation.

While the enthusiasm of all 23 million GOV.UK One Login users for adopting passkeys remains to be seen, the current adoption rate of nearly 10 percent for daily logins, coupled with the tangible cost savings from reduced SMS usage, provides strong incentives for continued promotion. This strategic move by the UK government positions it as a leader in adopting modern, secure authentication methods for public services.