The NCSC to begin recommending use of passkeys
The National Cyber Security Centre (NCSC) announced at CYBERUK 2026 in Glasgow that it will begin recommending the use of passkeys wherever a service supports them, and two-step verification (2SV) where it does not.
A passkey is a way to sign in that does not use a password. Instead, your account is linked to a device you own, such as a phone or computer. When you log in, the service asks your device to confirm it is you, and you approve this by unlocking the device with a fingerprint, face scan or PIN.
Based on analysis carried out by the NCSC, it has been concluded that passkeys provide stronger protection for users than traditional 2SV, which can be vulnerable to phishing. According to the NCSC, phishing is one of the most persistent causes of cyber compromise.
The NCSC point out that, as with any security control, passkeys need to be implemented and used sensibly to be most effective. Users will still depend on the security of their devices and credential managers.
See: https://www.ncsc.gov.uk/blogs/passkeys-are-more-secure-than-traditional-ways-to-log-in
The latest Mergers and Acquisitions (M&A) data from the Office for National Statistics (ONS) reveal a depressing landscape for UK companies. Foreign acquisitions of UK companies soared in value to £25.4 billion, up £9.7 billion from Q1 2026 and £15.7 billion higher than Q2 2025, highlighting how cheap UK company valuations are compared to foreign markets.
The UK government has unveiled its comprehensive response to the consultation on the post-2025 rollout of smart meters for non-domestic sites.
Companies House has changed its login process and from December objections to a limited company being struck off must be made through its ‘Make an objection’ online service.