Pass the key, passwords have passed their sell-by date

The UK's National Cyber Security Centre (NCSC) has officially endorsed passkeys as the default authentication method, marking a fundamental shift from decades of password-based guidance. A technical report released at the CYBERUK conference concludes passkeys are at least as secure as, and generally more secure than, password plus two-step verification. Major platforms including Google, eBay, and PayPal have resolved prior implementation barriers, enabling adoption at scale.