Passkeys vs Passwords 2026: Why Big Tech Is Killing Your Password and Whether You Should Let Them

# Passkeys vs Passwords 2026: Why Big Tech Is Killing Your Password and Whether You Should Let Them

> **Quick answer:** In April 2026, the UK's National Cyber Security Centre (NCSC) declared passkeys officially more secure than passwords and advised against using passwords where passkeys are available. Google, Apple, and Microsoft have all made passkeys the default for new accounts. Passkeys are 99.9% less likely to be compromised than passwords and 8x faster to use — but they come with real trade-offs around account recovery and vendor lock-in that the headlines aren't telling you.

The password has been dying for years. But on April 23, 2026, it finally got its official death certificate. The UK's National Cyber Security Centre, speaking at the annual CYBERUK conference, announced that passkeys are now "at least as secure as, and generally more secure than" password-plus-two-factor verification combinations — and told users to stop using passwords wherever passkeys are available. For anyone still using "hunter2" or a variation of their childhood dog's name, this is your formal notice.

## What Just Happened: The NCSC's Landmark Passkeys Ruling

The NCSC's April 2026 announcement was the culmination of years of cautious deliberation. The agency had considered endorsing passkeys in 2025 but held back because of real, documented problems: inconsistent naming conventions across platforms, unreliable device support, and incompatibility between different credential managers. Those problems, the NCSC now says, have narrowed enough to justify a full endorsement.

The timing is not coincidental. Around 50% of UK Google users now have at least one passkey registered. Major platforms including Google, eBay, PayPal, and Microsoft have spent the past 18 months quietly improving their passkey infrastructure to the point where mainstream adoption is finally viable.