Debated in Parliament on 8 Jul 2019.
Mr Mohamed Irshad asked the Prime Minister (a) since 2015, how many individuals have changed their SingPass ID to a non-NRIC detail; (b) whether the Ministry has studied the use of other unique user IDs for SingPass login; and (c) what efforts have been undertaken to inform users of the option to change their SingPass user ID to a non-NRIC detail.
To date, 26,000 users have changed their SingPass user ID to a non-NRIC ID. The NRIC number is used as the default user ID as it is unique and easy to remember. Users have the option to change this, and this information is publicised on the SingPass website.
Knowing one's NRIC number or the user ID alone is not enough to access his or her SingPass account. In addition to the user ID, third parties would also need to know the second authentication factor, in the form of one-time passwords received via SMS or the OneKey token, before they can access any SingPass account.
Last October, we launched the SingPass Mobile app to offer a more secure and convenient way for users to login to their SingPass accounts. The app uses a cryptographic-based software token for authentication, and is further protected using the phone's biometrics login or a user-specified PIN code. We recently updated the app to provide shortcuts to popular Government e-services, and to view your SingPass transaction history. Over 300,000 users have downloaded the app, and the feedback has been very positive. We will continue to improve the app regularly.
We strongly encourage users to download the SingPass Mobile. We also wish to remind the public to practice good cyber hygiene, and not share their username, password and 2FA details with anyone.