Singapore is adding passkeys to Singpass, letting users sign in to the national digital identity service with their phone’s fingerprint or face unlock instead of a password. The Government Technology Agency of Singapore said the change, which begins July 1, is meant to blunt phishing while keeping the login experience smooth.
Singpass is Singapore’s national digital identity platform, used by residents to access hundreds of government and private-sector digital services with a single secure login. More than just an authentication system, it functions as the country’s primary digital identity infrastructure, supporting everything from tax filing and healthcare to banking, insurance, and digital document signing. Its broad adoption has made it a central pillar of Singapore’s digital government strategy.
Passkeys work differently from the credentials scammers usually target. Rather than a password that can be stolen or a QR code a user can be tricked into scanning, a passkey verifies a private key stored on the user’s device against a public key registered in the Singpass system. Because no password or one-time passcode is entered or transmitted during login, GovTech says there is nothing for an attacker to intercept, even if a user lands on a fraudulent site. The agency framed the move against the cost of phishing, which it said was Singapore’s second most common scam last year, with losses of almost 40 million Singapore dollars.
Passkeys join Singpass’s existing options, including QR login, face verification, and SMS one-time passwords, rather than replacing them. To log in, a user selects the passkey option and confirms their identity with biometrics such as a fingerprint or facial recognition, or with a six-digit app passcode. If a device is lost or stolen, the Singpass app and its passkey are automatically deactivated once the user sets up Singpass on another device. The rollout starts in beta for iPhone users, with Android support to follow, and eligible users will be prompted in the app once the feature reaches them. From 10am on July 1, iPhone users can set up a passkey after updating the Singpass app and tapping a banner on the home screen, and GovTech said anyone needing help can contact the Singpass helpdesk or visit a service counter.
The launch continues Singapore’s layering of biometrics and stronger authentication onto Singpass, which already underpins access to government and private-sector services and has required selfie checks for high-risk banking actions. It also reflects the wider momentum behind passwordless login, as passkey adoption accelerates across the FIDO Alliance’s members.
“The introduction of passkeys enables a safer login experience that curbs phishing scams without compromising usability, making digital services more secure for everyone,” said Winston Teo, senior director of Singpass at GovTech Singapore.
Sources: CNA
–
By the ID Tech Editorial Team
