Singapore opens Singpass passkey access to Android users
In Singapore, from September 9, Android users can use passkeys in the Singpass app. This phishing-resistant authentication method was previously launched in test mode for iPhone users with iOS on June 30.
Gradual user rollout
As Channel NewsAsia reports, Singapore’s Government Technology Agency, GovTech, will send Android users notifications through the Singpass app reminding them to create a passkey. To use the feature, users are advised to update the app to the latest version.
As of September 9, around 800,000 users had already created a passkey in the Singpass app. GovTech also plans to enable support for this login method from computers by the end of 2026.
More current news is available on the UA.News Telegram channel Telegram.
How the protection works
Passkeys are an additional authentication option alongside logging in via a QR code, facial recognition, and one-time SMS passwords. The technology verifies a private key stored on the user’s device against a public key registered in the Singpass system.
With this type of login, a password or one-time password is not entered or transmitted, so attackers have nothing to intercept even if a user visits a fraudulent website. If a device is lost or stolen, the Singpass app and the passkey on it are automatically deactivated after Singpass is set up on another device.
According to GovTech, phishing was the second most common type of scam in Singapore last year, with losses amounting to nearly S$40 million, or US$31.6 million.
