Trust in tech instead of sticky notes to secure your online accounts, NCSC says

Password managers and passkeys help simplify our digital life, reduce login stress, and combat password fatigue.

“In today’s digital age, trust is the new currency. We entrust our devices with everything: our communications, our identities, our finances, and even our memories. But when it comes to online security, many of us hesitate,” the National Cyber Security Centre (NCSC) says in a blog post.

We shouldn’t. On the contrary, tools like password managers and passkeys are perfectly safe for managing your login credentials and protecting your online accounts.

A password manager is an application or secure digital “vault” that helps you create and remember passwords. The average internet user has dozens of online accounts on all kinds of different websites. You need a username and password for all these accounts.

To keep your accounts safe, each account must have a unique and strong password. That’s why it’s useful to use a password manager. You only need to remember one primary password, and the manager takes care of the rest.

If you forget your primary password, password managers offer the option of password recovery, meaning you won’t lose access to all of your passwords. Login credentials are also stored securely using device features like fingerprint or facial recognition and security chips.

If you opt for a password manager, you should use a strong and unique primary password and enable multi-factor authentication (MFA) for your account.

The NCSC calls passkeys “the future of authentication.” A passkey is a passwordless login technology based on asymmetric cryptography. Instead of a username and password, passkeys use two unique keys, also known as a cryptographic key pair.

One key is stored safely on your device, safeguarded by user biometrics or PIN. The other key stays with the app or website for which the user creates the passkey. Because this key pair combination is unique, the user passkey will only work on the website or app it was created for.

“Password managers and passkey technologies we use today are built with robust security principles. When used correctly, they offer far better protection than human memory, sticky notes, or reused passwords,” the United Kingdom’s cybersecurity agency concludes.