What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
UK Report Fraud is urging people to use passkeys after it reported £6.3 million stolen through email and social media account hacking in 2025/26, up from £1.2 million in 2024/25. The figures cover reported losses in that specific category—not all cybercrime or every unreported loss. Use a passkey where a service offers one; otherwise, use a strong, unique password stored in a password manager and turn on 2-step verification where available.
What the reported figures show
Report Fraud launched its passkey awareness campaign on 5 October 2026, during Cybersecurity Awareness Month. Its notice says the reported stolen sums from email and social media account hacking rose by £5.1 million, or 417 per cent, between the two financial years. Reports of this type of hacking rose by 34 per cent over the same period; that is a change in the number of reports, not the value of the stolen sums.
These are figures reported by Report Fraud for email and social media account hacking. The campaign notice does not describe the data’s denominator, collection method, loss-verification standard or completeness, so the totals should not be read as a measure of all UK cybercrime or all losses. Report Fraud calls account hacking the UK’s most reported form of cybercrime and says reports also involve gaming and streaming accounts, as well as travel and online delivery accounts.
Read Report Fraud’s campaign notice.
What is a passkey, and why use one?
A passkey is a sign-in credential supported by some online services. Instead of typing a password into a website, you authenticate using the passkey set up for that service. The NCSC recommends using passkeys wherever they are available because they can resist phishing: a look-alike site cannot simply capture a password that you typed and replay it at the legitimate service.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
The NCSC explains that passkeys bind authentication to the legitimate service. Its claim that passkeys “remove this class of attack entirely” refers to phishing attacks that steal passwords through look-alike sites—not every way an account can be compromised. A passkey is a useful defence against common credential-theft routes, not a guarantee of account security.
The NCSC’s passkey guidance explains the phishing protection in more detail. The NCSC also compares traditional credentials with FIDO2 credentials, including storage, synchronization and cross-device authentication, in its personal-use credentials paper. A passkey is a sign-in method; this campaign does not require buying a physical security key.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Which sign-in method should you choose?
| Option | When to use it | Security and practical considerations |
|---|---|---|
| Passkey | When the service supports passkeys | Recommended by the NCSC where available; resists phishing sites that try to steal passwords. Check how you will recover access if you lose access to a device or credential. |
| Strong, unique password plus 2-step verification | When the service does not support passkeys | Use a password manager to generate or store a strong, unique password. Enable 2-step verification (2SV) wherever the service offers it. |
Availability and recovery arrangements vary by service. Do not reuse a password across accounts: if one service is breached, a reused password can put other accounts at risk. For provider-specific options, consult the service’s official security settings or help pages.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →How to turn on a passkey
- Sign in through the service’s official website or app—not a link in an unexpected message.
- Open the account’s official security or sign-in settings and look for a passkey option. The exact menu name and setup steps differ by provider.
- Follow the service’s instructions to create and save the passkey, then check what recovery method is available if you lose access to the device or credential.
- If no passkey option is offered, set a strong, unique password using a password manager and enable 2SV if available.
Other ways to reduce account-takeover risk
Report Fraud also recommends limiting who can see your posts, avoiding personal details that could help someone impersonate you, and checking unexpected requests from people you know through another communication route. A message that appears to come from a friend or relative is not proof that their account is secure.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What to do if an account has been hacked
Use the affected service’s official recovery process and follow Report Fraud’s guidance for hacked accounts. Report Fraud says people in Scotland should report cybercrime to Police Scotland. Avoid recovery links sent in unsolicited messages; navigate to the provider’s official site or app yourself.
Report Fraud’s hacked-account guidance and reporting information.
Quick Recap
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
