SingPass two-step verification ensures secure transactions
We thank Mr Chui Wei Leong (“Allow SingPass users to disable two-factor authentication”, Aug 2), Mr Lim Kee Yong (“Why let SingPass users register only one number for 2FA?”, Aug 7), and Mr Patrick Tan Keong Boon (“Provide some flexibility for elderly SingPass users”, Aug 8) for their feedback.
As cyber-threats become increasingly widespread, there is a need to better protect users’ online identity and transactions.
In line with best practices around the world, the Singapore Government introduced a two-step verification (2FA) process for SingPass in July last year to ensure the security of online transactions with the Government.
SingPass users can choose to receive One-time Passwords (OTP) via SMS or OneKey token, or both.
While an SMS OTP provides a balance between security and convenience, we recognise that the delivery of the SMS OTP depends on various factors, such as network traffic and phone reception.
The OneKey token is a useful alternative method for users to generate OTPs.
Mr Chui may wish to email us at info [at] ida.gov.sg, so that we can offer him a OneKey token and assist him in the set-up process.
We are also working with the mobile network operators to improve coverage in his neighbourhood.
Mr Lim and Mr Tan shared their concerns about the elderly on the use of 2FA.
As Government transactions often involve sensitive and personal information, each user can register only one mobile number under his SingPass account.
Many non-regular SingPass users, including the elderly and less tech-savvy, seldom transact online or do not have any immediate need to access government e-services.
For such users, they can seek on-site assistance at islandwide Citizen Connect centres and 2FA counters to set up their 2FA if they need to access government e-services.
We will continue to look at ways to help the elderly set up their SingPass 2FA without compromising security.
For queries regarding SingPass 2FA, users can refer to the FAQs at www.tinyurl.com/SingPass2FA or email helpdesk [at] assurity.sg.
