Written Answer to Unanswered Oral Question

Number of Users who Have Changed SingPass ID to Non-NRIC Login

Speakers

Summary

This question concerns MP Mohamed Irshad’s inquiry regarding the number of individuals who have changed their SingPass ID to a non-NRIC detail and the efforts made to inform users of this option. Prime Minister Lee Hsien Loong responded that 26,000 users have made this change, noting that while NRIC is the default for its uniqueness, the option to change is publicised on the SingPass website. He clarified that user IDs alone are insufficient for access, as the system requires a second authentication factor like SMS one-time passwords or the OneKey token for account security. Prime Minister Lee Hsien Loong also promoted the SingPass Mobile app, which utilizes cryptographic software tokens and biometrics and has been downloaded by over 300,000 users for more secure logins. Users are encouraged to adopt SingPass Mobile and reminded to practice good cyber hygiene by not sharing their usernames, passwords, or two-factor authentication details with any third parties.

Transcript

56 Mr Mohamed Irshad asked the Prime Minister (a) since 2015, how many individuals have changed their SingPass ID to a non-NRIC detail; (b) whether the Ministry has studied the use of other unique user IDs for SingPass login; and (c) what efforts have been undertaken to inform users of the option to change their SingPass user ID to a non-NRIC detail.

Mr Lee Hsien Loong: To date, 26,000 users have changed their SingPass user ID to a non-NRIC ID. The NRIC number is used as the default user ID as it is unique and easy to remember. Users have the option to change this, and this information is publicised on the SingPass website.

Knowing one's NRIC number or the user ID alone is not enough to access his or her SingPass account. In addition to the user ID, third parties would also need to know the second authentication factor, in the form of one-time passwords received via SMS or the OneKey token, before they can access any SingPass account.

Last October, we launched the SingPass Mobile app to offer a more secure and convenient way for users to login to their SingPass accounts. The app uses a cryptographic-based software token for authentication, and is further protected using the phone's biometrics login or a user-specified PIN code. We recently updated the app to provide shortcuts to popular Government e-services, and to view your SingPass transaction history. Over 300,000 users have downloaded the app, and the feedback has been very positive. We will continue to improve the app regularly.

We strongly encourage users to download the SingPass Mobile. We also wish to remind the public to practice good cyber hygiene, and not share their username, password and 2FA details with anyone.