NordVPN Urges Wider Adoption of Passkeys to Replace Passwords

A leading VPN provider is pushing for greater adoption of passkeys as a safer alternative to passwords. Speaking on the Double Tap podcast, Karolis Arbaciauskas highlighted the growing security risks of password reuse, data breaches, and phishing attacks, emphasising that passkeys offer a phishing‑resistant and user‑friendly solution for authentication.

Karolis explained that passwords, despite being the foundation of internet security for decades, are no longer sufficient. “Only around six percent of leaked passwords are unique,” he said, noting that many users rely on four or five “core” passwords reused across accounts, including work and personal services. This pattern leaves accounts vulnerable to brute force attacks and credential stuffing.

Passkeys, by contrast, store a private and public key pair on a user’s device. “Websites that issue a passkey can challenge your device, and only the original private key can respond. This makes phishing almost impossible,” Karolis said. Unlike single sign‑on services from Apple or Google, passkeys do not rely on third‑party identity providers, but adoption remains limited because many websites still default to password logins.

For now, Arbaciauskas advises users to combine best practices:
– Use a secure password manager to generate and autofill strong passwords.
– Enable two‑factor authentication wherever possible to add “a second front door” for attackers to breach.
– Adopt passkeys and single sign‑on when available to reduce exposure to password‑related threats.

He also suggested that broader awareness and website support are needed before passkeys become the default, though the business sector is adopting them faster due to regulatory and security pressures.

The shift to passkeys could benefit anyone concerned with online security, particularly regular users of services that require multiple logins. For blind and partially sighted users, reducing password entry and reliance on manual typing improves both security and accessibility, especially on mobile and wearable devices where text input can be cumbersome.

Resources:
– NordVPN Official Website
https://nordvpn.com

– FIDO Alliance: Passkeys Explained
https://fidoalliance.org/passkeys/

– Apple Guide to Passkeys
https://support.apple.com/guide/security/passkeys