Passwords have long been the default way we secure accounts online but the NCSC has said passkeys are a better option.