Passkeys: Are they really the key to unlocking cyber resilience?

We understand that, for many SMOs in the South West, cyber security can feel like a constant balancing act. Juggling limited resources, customer trust, and regulatory compliance, all while trying to grow your business. One tool that has been making headlines recently is the “passkey”, but what is it? And more importantly, can it really help your business become more cyber resilient?

What are Passkeys?

Simply put, passkeys are a modern, more secure alternative to traditional passwords. Rather than relying on you to remember three random words, complex strings of characters, or, even worse, reusing the same password across multiple accounts, passkeys use cryptographic keys to verify your identity securely. They’re unique to both your device, such as your smartphone or laptop, and the online service you’re signing into, making them far harder for cyber criminals to intercept or steal.

Passkeys are a unique, digital key that works only for your account. Unlike passwords, passkeys cannot be easily phished, guessed, or leaked in a data breach.

What does this mean for SMOs?

SMOs are increasingly attractive targets for criminals. Many assume that attackers only target larger corporations, but in reality, small businesses are often easier to breach, and a single cyber incident can be devastating for them. For SMOs in the South West, where local networks and community reputation is so important, the stakes are particularly high.

Passkeys can help your business:

·       Reduce the risk of human error: Weak or reused passwords are the most common entry points for cyber attacks. By removing the need for passwords, passkeys minimise this vulnerability.

·       Simplify access management: Employees no longer need to juggle multiple passwords or write them now, making logging into critical systems more secure and hassle-free.

·       Boost customer and supplier confidence: Using modern security measures signals to customers, suppliers, and other partners that your business takes the protection of its data seriously.

·       Support remote and hybrid work: South West SMOs often rely on flexible working arrangements, and passkeys make it easier for remote staff to access systems securely without the complications of password resets.

Are passkeys the key?

While passkeys significantly reduce risks associated with passwords, they are not a standalone solution to cyber resilience and must be used in conjunction with other important protocols.

·       Staff training: Even the most advanced technology can be undermined by human error. Regular Security Awareness Training will help staff recognise a potential cyber threat and report it before it escalates.

·       Regular backups: Secure backups protect your business in the event of a malware attack or system failure.

·       Up-to-date systems: Keep devices and software up-to-date as this closes any gaps in your cyber security that attackers could potentially exploit.

·       2-step verification (2SV): Combining passkeys with other authentication methods such as 2SV adds an extra layer of security.

Think of passkeys as a powerful new tool in your cyber resilience kit, but not foolproof. They should be complemented by other best practices, rather than replace them.

How to get started with passkeys

Implementing passkeys doesn’t have to be difficult or overwhelming. Many servers that you are probably already using support them such as Microsoft 365, Google Workspace, and Apple iCloud. SMOs can start small, perhaps with a pilot team of employees in charge of high-value accounts, and gradually roll them out across the business.

It’s also worth noting that passkeys align with regulatory expectations around data protection. The National Cyber Security Centre (NCSC) recommends moving away from passwords wherever possible, particularly for sensitive accounts. Adopting passkeys could therefore help demonstrate due diligence in protecting both your business and your customers.

Final thoughts

For SMOs in the South West, passkeys should be more than just a new buzzword, they represent a practical and user-friendly step towards stronger cyber resilience. While they may not be a magic solution, they dramatically reduce the risks associated with traditional passwords, simplify access for employees, and boost trust amongst customers and partners.

The South West Cyber Resilience Centre is here to support your business on its journey to cyber resilience. We can help you take small steps such as introducing passkeys to give your business the secure foundation it needs to grow confidently while operating online. Begin your journey to stronger cyber security today. By joining us for free, you’ll receive expert guidance and access to fully funded services delivered by leaders in the cyber security industry. If you have any questions about using passkeys or if you need to report a potential cyber incident, then contact us today.