·By David
The National Cyber Security Centre is on board with Passkeys.
#IT Security#passkeys
Having been fired up by the thought of public key cryptography and reading Applied Cryptography by Bruce Schneier the '90's whilst designing CipherIM I wondered why we were using plain text passwords for many things. Surely this technology was far better.
Some 27 years later we are finally getting some traction with viable public key based technology to replace passwords where that is a good idea.
To blindly copy from the NSCS's(
National Cyber Security Centre
) web site "Passkeys are a more secure alternative to passwords that you don't need to remember as they are created and managed safely by the software on your device(s)."
How many of use would relish the though of not having to remember passwords to vey service we use, or to have to maintain them in a password manager. Who of us actually rotates our passwords at regular intervals, how many of use the same password for more than one service.
This won't be a 'magic bullet' for password-less security but it does help those too lazy to properly secure their passwords to get another level of protection against phishing attacks for example because passkeys are resistant to phishing, can’t be intercepted, reused or stolen like passwords. They are also as or more secure than multi-factor authentication.
Victoria, London
Leaflet © OpenStreetMap contributors