Media Releases
Singpass Launches Passkeys: A Safer Login Method
30 June 2026
Passkeys offer stronger protection against online scams like phishing.
The Government Technology Agency of Singapore (GovTech Singapore) today announced the beta launch of passkeys as a new login method for Singpass, Singapore’s national digital identity platform. Passkeys add to existing authentication methods such as QR login, Face Verification, and SMS One-Time Passwords (OTPs). By offering robust resistance to phishing, passkey logins fortify defences against emerging cyber threats without compromising the seamless digital experience Singapore residents expect. The initial beta phase is available to iPhone (iOS) users, with passkeys to be extended to Android users in subsequent phases. Users who have enabled notifications in their settings will receive a push notification in the Singpass app when the feature becomes available to them.
How Singpass’ Passkeys Work
Starting 1 July at 10am, iPhone (iOS) users can create a passkey by updating their Singpass app to the latest version. Once updated, they can open the app, tap on the banner on the home screen, and follow the instructions to complete the passkey creation. To log in, users select the passkey option on the Singpass login page and verify their identity using biometrics (fingerprint or facial recognition) or their six-digit app passcode.
During login, Singpass verifies a private key stored on the user’s device against a corresponding public key registered in the Singpass system to validate an official login. This verification ensures that passkeys work only on the legitimate Singpass login domain and cannot be used on fake websites. Since the private key never leaves the device and no login credentials such as passwords and OTPs are entered or transmitted, there is nothing for scammers to steal – even if users inadvertently land on a fraudulent website. Passkeys offer a more secure authentication method than passwords, which can be stolen, and conventional QR codes, which scammers can mislead users into scanning. Authentication via passkeys would prevent unauthorised access through such methods. (Refer to Annex A for more technical details on passkeys and the creation and login flows).
Additional Layer of Protection
Phishing scams were the second most common type of scam in Singapore in 2025, with losses amounting to S$39.9 million1. Users are strongly encouraged to adopt passkeys, as they provide an additional security layer against phishing scams and increasingly sophisticated cyber threats. Existing authentication methods will remain available to ensure continued access to services. If a device is lost or stolen, the Singpass app and passkey on that device will be automatically deactivated when the user sets up their Singpass app on another device. This ensures users retain full control over their digital identity.
“GovTech Singapore is committed to making Singpass a trusted, well-designed national digital identity that is secure, inclusive, and provides users peace of mind during transactions,” said Winston Teo, Senior Director of Singpass at GovTech Singapore. “The introduction of passkeys enables a safer login experience that curbs phishing scams without compromising usability, making digital services more secure for everyone.”
To support user adoption of passkeys, GovTech Singapore is expanding its assistance channels. Users who need help can contact the Singpass Helpdesk or visit a ServiceSG or Singpass counter located in Community Centres or Clubs across Singapore. Feedback is welcomed via the contact form on the Singpass website or within the Singpass app settings, as part of ongoing efforts to enhance the Singpass service.
Singpass serves as a trusted gateway to thousands of services across government and private sectors, including finance and healthcare, facilitating over 41 million transactions monthly and powering Singapore’s digital economy. For more information regarding passkeys, visit www.singpass.gov.sg/passkeys (opens in new tab).
[1]Based on statistics from the Singapore Police Force’s Annual Scams and Cybercrime Brief 2025 (opens in new tab).
ISSUED BY THE COMMUNICATIONS AND MARKETING GROUP
GOVERNMENT TECHNOLOGY AGENCY OF SINGAPORE
For media enquiries, please contact:
GovTech Corporate Communications
Email: media@tech.gov.sg (opens in new tab)
About the Government Technology Agency of Singapore
The Government Technology Agency of Singapore (GovTech Singapore) is the lead agency driving the nation’s Smart Nation initiative and public sector digital transformation.
GovTech Singapore builds tech for public good to improve the lives of Singaporeans, while supporting public agencies in delivering digital services and managing enterprise IT operations. The agency also oversees and safeguards government ICT infrastructure, and regulates public sector ICT procurement, data protection, and cybersecurity.
GovTech Singapore is a statutory board under the Ministry of Digital Development and Information.
For more information, please visit https://www.tech.gov.sg/. (opens in new tab)