Beyond Passwords: UK Government Endorses Phishing-Resistant Security for All

13 May 2025
Get in touch

Share on social..

Government Makes Historic Shift to Passkeys

The UK government has announced plans to roll out passkey technology across its GOV.UK digital services later this year, replacing SMS-based verification with a more secure and cost-effective alternative.

This announcement, made during the opening of the government’s flagship cyber security conference, CYBERUK, marks a significant advancement in the UK’s commitment to enhancing digital security for everyone.

For those of us who care deeply about protecting small businesses from preventable cyber threats, this announcement represents a major step forward in making phishing-resistant security accessible to all.

 

The Human Reality Behind the Technology

Let’s take a moment to consider what this really means.

Sarah, a small business owner, is rushing between client meetings when she receives an urgent email that appears to be from a supplier. She clicks a link, enters her password on what looks like a legitimate website, and unwittingly gives cybercriminals access to her business accounts.

This scenario plays out thousands of times every day across the UK. Not because people are careless, but because they’re human – trying to be responsive and efficient in a digital world designed to trick them.

The harsh reality is that phishing was responsible for 84% of business breaches in the UK last year. Despite our best efforts with complex passwords and Multi-Factor Authentication (MFA), scammers and cybercriminals continue to find ways to exploit these very human moments.

 

What The Government’s Decision Means For Small Businesses

The National Cyber Security Centre (NCSC) views the adoption of passkeys as a crucial step in strengthening the UK’s national cyber resilience. The NHS is already one of the first government bodies worldwide to implement passkey login options.

AI and Digital Government Minister Feryal Clark explained: “The rollout of passkeys across GOV.UK services marks another major step forward in strengthening the UK’s digital defences while improving the user experience for millions.”

She added: “Replacing older methods like SMS verification with modern, secure passkeys will make it quicker and easier for people to access essential services – without needing to remember complex passwords or wait for text messages.”

This isn’t just about government services. When a national security body like the NCSC makes such a significant move, it signals a fundamental shift: we’re finally moving beyond expecting people to be perfect 100% of the time.

 Click Here for more information on Passkeys and how the tech works.

Protection That Works Even When We’re Human

NCSC Chief Technical Officer Ollie Whitehouse emphasised this point: “The NCSC has a stated objective for the UK to move beyond passwords in favour of passkeys, as they are secure against common cyber threats such as phishing and credential stuffing.”

He continued with clear advice for businesses: “We strongly advise all organisations to implement passkeys wherever possible to enhance security, provide users with faster, frictionless logins and to save significant costs on SMS authentication.”

For small and medium-sized businesses, this carries an important message: the technology that protects us shouldn’t depend on human perfection. We need security that works during busy Monday mornings, when we’re rushing to finish before the weekend, or when we’re juggling multiple priorities.

 

Giving Time Back To Your Team

Beyond the security benefits, the NCSC announcement highlighted something that matters to every business owner: passkeys give your team valuable time back.

Passkeys reduce login time by roughly a minute compared to traditional methods. Microsoft reports that signing in with passkeys takes about 8 seconds on average – compared to 69 seconds using a password plus second factor.

Imagine what your team could accomplish if they weren’t spending time:

  • Resetting forgotten passwords
  • Waiting for SMS codes that never arrive
  • Getting locked out of accounts
  • Calling IT support for login issues

Small time savings multiply into significant productivity gains across your entire business.

 

The Remaining Challenges

The NCSC has honestly acknowledged several challenges that still need to be addressed:

  1. Inconsistent support and user experience across platforms
  2. Concerns about device loss and recovery
  3. Limited migration capabilities between platforms
  4. Weaknesses in account recovery processes
  5. Inconsistent terminology across different platforms
  6. Not suitable for every situation, such as shared devices

These are real concerns that shouldn’t be dismissed. However, they aren’t reasons to delay adoption – they’re reasons to approach implementation thoughtfully.

 

Moving Forward With Empathy

At Lumina Technologies, we’ve been helping small businesses implement phishing-resistant security with a focus on the human element. We understand that security isn’t just about technology – it’s about people and how they work.

Think about your own team:

  • The sales director checking emails between client meetings
  • The finance manager processing multiple invoices during month-end
  • The project manager coordinating deliverables under tight deadlines

Each of these dedicated professionals deserves security that protects them even during their busiest moments.

 

What This Means For Your Business Now

The government’s announcement confirms what cybersecurity experts have been saying: the future of authentication must be phishing-resistant. Businesses that adopt these technologies now will protect their teams and their data from the most common attack methods.

The NCSC has joined the FIDO Alliance, the global body shaping the future of password-free authentication. Andrew Shikiar, Executive Director and CEO of the FIDO Alliance, noted: “By prioritising modern, phishing-resistant authentication, the UK is setting a strong example for both the public and private sectors in the UK and beyond.”

For business owners, this creates clarity about the future direction of security standards.

 

Security That Supports Your Team

If you haven’t yet explored how passkeys could strengthen your business’s security, the government’s endorsement provides assurance that this technology is becoming mainstream.

Our approach at Lumina is to implement security that works with your team, not against them. Through our PRISM Business and Enterprise packages, we offer phishing-resistant security measures that protect your people even when they make innocent mistakes.

We appreciate how hard it is being the founder of your own business. You shouldn’t have to choose between security and productivity – and with modern phishing-resistant technologies, you don’t have to.

One click shouldn’t risk your company. Not anymore.

Remember, good security isn’t about expecting perfection from your team – it’s about protecting them so they can focus on what they do best: helping your business grow.

Click Here to find out more about Lumina’s IT security journey and Cyber Security Services!

 

Sources: (5) NCSC Announces UK Pioneering Global Move Away From Passwords | LinkedIn

What our customers say

Lumina Technologies have taken the time to understand the requirements of our business and work as our strategic IT partner, enabling us to concentrate on delivering a high quality service to our clients and focus on our growth strategy. They have delivered a 100% cloud solution to our business with no underlying infrastructure costs or maintenance, which gives us scalability for our planned growth. It also means our business critical applications and data are securely accessible from virtually all our user devices. Lumina’s professional approach and strategic expertise is highly valued and their management of our IT – based on their in-depth knowledge, leaves us confident that our systems are available 24×7.

Luke Harrison
Keidan Harrison LLP

Lumina have supported us so well through the difficult circumstances of 2020.  They worked extremely hard to ensure we were able to work remotely and continue to operate our business successfully. The support team are very friendly and knowledgeable, and have excellent response times.

The team have also enhanced our cyber security which is so important in the legal sector, and they continue to provide high quality advice to help us move forward with our IT goals.

Robin Illingworth
Managing Partner, Adams & Remers LLP

The quality of IT Support provided by Lumina Technology is of the highest standard and is complemented by effective client liaison with impressive response times. Trap Oil Group plc has no hesitation in recommending Lumina as a dedicated and specialist group of IT professionals.

Martin David
Technical Director, Trap Oil Group plc

Richard and his team are a real inspiration to anyone who meets them and I have watched Lumina’s growth over the last few years with interest and admiration. Richard has been an amazing supporter of the Hospice of St Francis, being a Gold member of the Corporate Partner Network for almost two years. He takes an active interest in the community and is passionate about his company and his town: nothing is too much trouble, he is always willing to help, to give up his time and to provide business advice when asked. Lumina is an inspiration to any company wanting to set up business in Hertfordshire.

Carolyn Addison
Corporate Fundraising Manager, The Hospice of St Francis

Lumina Technologies Prism Hosted Desktop has allowed our business to centralise our global corporate data, allowing much faster access for all our staff – regardless of their location. We have also been able to simplify and reduce our infrastructure and management overhead. With the new Prism Hosted Desktop solution all staff now have simple and secure access to corporate data using any device they choose. Prism Hosted Desktop has increased the productivity of our staff and given us a single, consistent and familiar experience for all users from any device, in any location, 24/7.

Katherine Roe
Chief Executive Officer, Wentworth Resources PLC

The commercially sensitive and regulated nature of Lambert Energy Advisory’s business requires an IT provider able to maintain the highest levels of integrity and confidentiality, Lumina Technologies has consistently been unimpeachable in this regard over the nine years we have employed them.

Patrick Agar
Lambert Energy Advisory

It has been a great pleasure working with Lumina Technologies over the past two years. They have fully committed to being involved in the local community with volunteering and with professional advice and commitment, helping many local charities along the way. As a growing company it proves that being involved in the local community is helping them attract and retain a talented workforce and I look forward to working with them well into the future.

Cindy Withey
Connect Dacorum

Hawkstone Management Services Ltd is a small company for which IT Outsourcing is realistically the only viable option. Lumina Technologies have successfully performed this role for over fifteen years. They also provide innovative solutions to keep pace with technological progress. I would have no hesitation in recommending Lumina to similar sized businesses.

Stephen Pembury
Hawkstone Management Services Ltd

Charles Douglas Solicitors LLP have been using Lumina Technologies for a number of years now and continue to be impressed by the technical know-how and contemporary knowledge of their senior management, who provide a timely, efficient and friendly service. Whether it is a small issue with one computer, or a strategic IT decision, they maintain a current knowledge of available technologies. Lumina are always at the other end of the phone to help resolve issues and minimise business interference. The technical knowledge of Richard and his senior team means that there has not been a problem that they can’t solve to date. I am sure we will continue to use them in the years to come.

Charles Douglas
Managing Partner, Charles Douglas Solicitors LLP

The team at Lumina Technologies have made the Amoun Travel & Tours office IT transition seamless and problem free. The office set-up has been vastly improved and the IT Support services are flawless. No issue goes unresolved, which is extremely reassuring.

Adam Helmy
Amoun Travel & Tours Ltd

Lumina Technologies has been Salamander Energy plc’s IT provider since start-up in 2005 and has supported us in London during our expansion across operational offices in SE Asia. Their professional approach, strategic advice and close co-operation have been essential in making this a success.

John Bell
Group Technical Director, Salamander Energy plc

Richard and his team at Lumina have provided Perrett Laver Limited with high quality strategic and practical IT Services for over ten years. During this period, Perrett Laver has grown from 10+ colleagues based in London to nearly 100 colleagues located in six offices across the Americas, EMEA and Asia-Pacific. Richard and the Lumina team have not just been responsive to our ‘everyday’ IT needs, but have proactively sought to work with us on developing an infrastructure suitable for the type of operation we are today, and are planning to be months and years down the line. I would not hesitate to recommend Richard, especially for small to medium size business with growth in mind.

Clementine McKinley
COO, Perrett Laver Limited

Society Limited has been supported by Lumina Technologies since our earliest start-up phase. From large logistical challenges like an office move, through to smaller fiddly issues like fixing a faulty e-template, we know we can count on their support and advice. They’ve also been able to engage with us strategically on the challenge of scaling-up our infrastructure as the firm continues to grow and evolve. We always feel confident going to Lumina with a problem, since we know they genuinely care about sorting things out and helping us to get on with our core business.

Simon Lucas
Managing Director, Society Limited

The Vita Group HQ staff have worked with Richard McBarnet and Lumina Technologies for over 9 years, with Lumina providing all our PC, server, phone, and software support. The services have included C-level executives based in London, Manchester, the US, as well as supporting home office IT as well. The service provided and intellectual capabilities are outstanding and we would highly recommend Richard and his Lumina team.

Joe Menendez
CEO, The Vita Group

We worked with Lumina on a GDPR Audit. Richard was knowledgeable and professional throughout, and did the best he could to bring a dry topic to life through lots of real life examples and analogies. We were so impressed with the service Lumina provided and the value we got from partnering with them on this project – we couldn’t recommend them enough.

Holly Cottingham, Vintec Laboratories

We’ve been so well supported by Paige and the Lumina team. They’ve been highly professional, very responsive, friendly, supportive. It’s really validated the decision to engage an IT partner, and we’re glad it’s with Lumina. 

Bruce Storey
Chief Operating Officer, Estu Global Ltd

Discuss your business needs today

Get in touch Schedule a call