Two Factor SMS is Dead

The UK government announced at the CYBERUK 2025 conference that it aims to replace passwords and SMS with phishing-resistant Passkey technology across its entire digital estate by the end of 2025. This is a major benefit for UK citizens; it not only delivers greater security but also a much improved user experience for all.

91% of all cyber attacks start with a phishing attack, if we can eliminate that we are a major step forward in reducing the risk of another M&S and Co-op attack. No amount of training will stop this attack, the legendary security expert Troy Hunt was caught by such an attack. You need to use technology that prevents it. 

One of Joe Biden's last executive orders mandated that US federal services move to phishing-resistant technology; this will soon become the stance of all governments worldwide.

It's been a long time coming. Rock Solid Knowledge has developed a Passkey component certified by the FIDO Alliance for .net, which has been available since mid-2020. Finally, the Passkey transition is now well underway, with many vendors (Microsoft, Amazon, Google ) moving away from announcing "World Password Day" on May 1st to "World Passkey Day. "

Even if you don't believe in the need for this extra level of security, your users will ultimately expect/demand a Passkey experience when using an online service. If you are selling goods online, creating an account with Passkey is simple, and the authentication process is a breeze. You can see how easy it is via our test site, fido.identityserver.com (fido is the original name for passkeys).

If you are using passwords for online authentication today, you need to start moving away today. Otherwise, you risk losing customers and perhaps even being hit by a cyber attack.