the news now

The world's news, cross-checked among reputable sources.

Singpass Extends Passkey Authentication to Android Users

2 sources · Singapore · 2 of them are linked to a state

Who reported this

  • CNA Singapore · Centre · State-affiliated · Mediacorp, wholly owned by Temasek Holdings
  • The Straits Times Singapore · Centre-right · State-affiliated · SPH Media Trust; management shares under the NPPA

What the colours mean

  • Left
  • Centre-left
  • Centre
  • Centre-right
  • Right
  • A hatched block means the outlet is affiliated with, or controlled by, a state.

Political lean describes where an outlet sits within the politics of its own country. It is never a position on a single global scale.

Political lean is comparable inside one country and not across them, which is why the bar groups by country first. Publicly funded broadcasters are not marked as state-linked.

The owner of each outlet is listed as a matter of record, not as a judgement about the outlet.

Every source for this story reports from Singapore.

Android users in Singapore can begin using Singpass passkeys starting September 9. The Government Technology Agency of Singapore (GovTech) announced that users will receive notifications through the Singpass app in phases prompting them to create a passkey. Users are advised to update their app to the latest version to access the feature.

Passkeys were first introduced in a beta launch for iPhone users on June 30. As of September 9, approximately 800,000 users had created a passkey. Support for desktop logins is planned for implementation by the end of 2026.

The authentication method uses a pair of encryption keys: a private key stored on the user's device and a public key registered in the Singpass system. This process ensures that access is granted only to legitimate websites, making it more secure than passwords or QR codes which can be stolen or manipulated by scammers. Users can log in by scanning their face or fingerprint in the app, or by entering a six digit passcode if biometric authentication is not set up.

Passkeys serve as an additional login option and do not replace existing methods such as SMS OTPs, face verification, or QR logins. If a device is lost or stolen, the passkey is automatically deactivated when the user sets up Singpass on a new device. The system complies with open standards developed by the Fast IDentity Online (FIDO) Alliance, which includes members such as Google, Apple, and Microsoft.

The initiative aims to counter phishing scams. According to the Singapore Police Force, phishing was the second most common scam in 2025, with victims losing S$39.9 million. Data from the first half of 2026 shows a decrease in phishing cases to 3,104 from 3,772 in the same period of 2025, with monetary losses dropping from S$30 million to S$9.6 million.

How each side framed it

Centre
The center lean outlet focused on the technical rollout timeline and the specific security benefits against phishing.
Centre-right
The center-right lean outlet emphasized the broader ecosystem of the national authentication system and its alignment with international industry standards.

Sources

100% of the statements in this article were traced back to the source articles listed above.