The SingPass or Singapore Personal Access was launched in 2003 and aimed to make transacting with government agencies an easier affair by offering users one password and ID to transact with over 60 government agencies.
Benefits of the System
- The SingPass service is offered to both individuals and companies alike. For business entities, a similar service called CorpPass is available.
- The SingPass ID can be used with over 60 government agencies to carry out transactions either on an individual basis or on behalf of the entity itself. This helps eliminate the need to remember 60 different usernames and passwords.
- The service allows for increased efficiency in operations of government agencies as they do not need to develop and oversee an authentication system of their own.
- Some of the various government agencies that utilize SingPass are:
- Accounting and Corporate Regulatory Authority (ACRA)
- Building and Construction Authority (BCA)
- Housing & Development Board (HDB)
- Immigration & Checkpoints Authority (ICA)
- Land Transport Authority (LTA)
- It also offers, as a main feature, a more secure way to manage account logins and allows individuals and businesses to conduct transactions in a secure way.
- Since the same SingPass ID and password is used to interact with a myriad of government agencies, it becomes imperative that security of information is provided. The security system behind the SingPass ID and password is a constantly evolving one wherein users are provided with alphanumeric passwords and end-to-end encryption.
- The service provides an in-built feature of periodically updating the password. The password that has been updated cannot match any of the previous 5 passwords used.
- The password is also an alphanumeric password which requires it to be between 8 to 24 characters long and contain a capital letter, a number and a special symbol.
- Passwords that have not been updated and have been left inactive for a period of 3 years or more are automatically reset. This ensures that users with dormant accounts are not at risk of cyber-attacks.
- When trying to login using the SingPass ID and Password, if the user fails in login attempts 3 times or more in a successive manner, they will be prompted to enter randomly generated security codes. This features ensures accounts are not accessed illegally through brute-force attacks.
- The service also alerts users when any changes are made to their personal accounts. Any changes made to the personal information will alert the registered user and require their verification to confirm the change.
- Any changes made to the account holder's key personal information will trigger a notification letter, which will be sent to the user’s registered address to verify this change.
- The service also is equipped with a 2-Step Verification which is also known as 2FA and is required when carrying out government e-transactions that involve sensitive data.