Singpass passkey that turns mobile devices into digital keys to counter scams now available to Android users

Read more at straitstimes.com.

The Straits TimesSarah Koh2026-09-09 11:37查看原文 ↗

为加强对网络钓鱼等诈骗的防范，Singpass应用将推出通行密钥（Passkey）作为新的登录方式，用户可在最新版本的Singpass应用上创建通行密钥。当局从2026年7月1日起，逐步让用户使用通行密钥登录。

A user’s passkey cannot be shared or exploited, unlike passwords or QR codes, and will not work on fake websites.

Published Sep 09, 2026, 11:37 AM

Updated Sep 09, 2026, 11:37 AM

SINGAPORE - A new mode of national authentication initially rolled out to Apple iPhone users has now been extended to Android phone users.

National authentication system Singpass’ new passkey feature aims to foil phishing scams that have led to millions in losses by ensuring that access is granted to legitimate websites only.

It works through a unique pair of encryption keys – one residing on the user’s phone and the other on Singpass’ backend server – for every website that is integrated with the national authentication system.

Thus, a user’s passkey cannot be shared or exploited, unlike passwords or QR codes, and will not work on fake websites.

Android users will receive reminders to create their passkeys via notifications from the Singpass app starting Sept 9, said the Government Technology Agency of Singapore in a statement.

Around 800,000 iPhone users have created their passkeys since the initial rollout in July, it added.

GovTech is the agency that operates Singpass, which supports 5.5 million users and is integrated with over 1,400 government agencies and private sector services. They include digital health portal HealthHub, the Inland Revenue Authority of Singapore’s tax portal, the Central Provident Fund Board, DBS Bank and Singtel.

A one-time registration is needed to use passkey authentication.

Android users need to update their Singpass app and click on the “create passkey” banner in the app, and follow the instructions provided to enable their passkeys.

Once the pair of unique passkeys are registered with Singpass, users log in to websites that accept Singpass verification by scanning their face or fingerprint in their Singpass app. Users who have not set up biometric authentication can enter their six-digit passcode in the app.

Singpass’ backend system will verify the private key stored on a user’s device against the public key registered in the system to validate every login.

Users need not register separate pairs of encryption passkeys for every website.

Laptops and desktops currently do not support Singpass passkey. But the feature will be extended to desktop users by the end of 2026, said GovTech.

Singpass passkeys comply with open standards developed by the Fast IDentity Online (Fido) Alliance, an industry association comprising over 250 members. They include tech firms such as Microsoft, Google and Apple, as well as government bodies in Australia, the United Kingdom and the United States.

Many online services, including those from Apple, Google, Microsoft and Adobe, already offer Fido passkey authentication, in addition to traditional passwords and two-factor authentication.

The number of phishing cases in Singapore has fallen to 3,104 cases in the first half of 2026, from 3,772 during the same period in 2025. Monetary losses suffered by victims of phishing scams have also fallen from $30 million to $9.6 million.

GovTech/Government Technology Agency

Technology and research

与密码或二维码不同，用户的通行密钥无法被共享或利用，并且在虚假网站上无法使用。

发布于 2026 年 9 月 9 日上午 11:37

更新于2026年9月9日上午11:37

新加坡——一种最初面向苹果iPhone用户推出的新型国家认证方式，现已扩展到安卓手机用户。

新加坡国家身份验证系统 Singpass 的全新密码功能旨在通过确保仅对合法网站授予访问权限，来挫败导致数百万损失的网络钓鱼诈骗。

它通过一对独特的加密密钥来工作——一个密钥位于用户的手机上，另一个密钥位于 Singpass 的后端服务器上——每个与国家身份验证系统集成的网站都使用一对密钥。

因此，用户的通行密钥无法像密码或二维码那样被共享或利用，也无法在虚假网站上使用。

新加坡政府科技局在一份声明中表示，从9月9日起，Android用户将通过Singpass应用程序的通知收到创建密码的提醒。

报告还指出，自 7 月份首次推出以来，已有约 80 万 iPhone 用户创建了自己的密码密钥。

新加坡政府科技局 (GovTech) 负责运营 Singpass，该平台拥有 550 万用户，并与超过 1400 个政府机构和私营部门服务集成。这些机构包括数字健康门户网站 HealthHub、新加坡税务局的税务门户网站、中央公积金局、星展银行和新加坡电信。