The government has confirmed that from next year users of GOV.UK One Login will be able to prove their identity by securely logging into their bank account. The announcement was made by Stephanie Peacock, a minister at the Department for Digital, Culture, Media and Sport (DCMS), in response to a question from Devon MP Martin Wrigley about the system's accessibility.
New identity options for One Login users
Peacock said the government is committed to making One Login as accessible as possible while protecting users from fraud. She noted that the system already offers multiple ways to prove identity, including through the app, online security questions, or in-person via the Post Office.
She added that the department is expanding these options, with the new bank account login feature launching next year. People receiving Personal Independence Payment (PIP) can already use benefit information to prove their identity, and the government is working with the DWP to extend this to a wider range of benefits. Alternative routes remain available for those who cannot or choose not to use One Login.
Background and security concerns
One Login, used by around 23 million people, provides access to services such as DWP for state pension and benefits, HMRC for tax records and National Insurance details, DVLA driving licence renewal, and childcare services. The DWP announced in May that the service can be used to check a number of benefits, including Attendance Allowance, adult DLA, ESA, Income Support, JSA, Pension Credit, and the State Pension.
Concerns about the system's security have been raised by senior MPs. David Davis, a Conservative MP and civil liberties campaigner, has previously called One Login "scandalously insecure." In a Westminster Hall debate, he said the system would be worse than the Horizon scandal, claiming that early security tests found the system could be easily breached. The government has rejected this analysis, stating that One Login follows the highest security standards and undergoes regular reviews.
Passkeys and next steps
The government announced in September that passkeys are being rolled out across One Login, allowing users to log in with a PIN, Face ID, or fingerprint instead of a password. Officials say passkey logins are up to 8 times faster and help protect against phishing and other cyber threats.
Jonathon Ellison, NCSC Director for National Resilience, encouraged users to set up a passkey for One Login, describing it as a highly phishing-resistant alternative to passwords. The new bank account identity option is expected to launch next year, further expanding the ways users can access government services.
