Singpass Launches Passkeys to Combat Phishing Scams

On July 1, 2026, Singapore's Singpass will introduce passkeys for iPhone users to enhance security against phishing scams. This new authentication method utilizes a unique pair of encryption keys, with one stored on the user's device and the other on Singpass' server, ensuring access is granted only to legitimate websites. The initiative aims to protect the 5.5 million Singpass users from scams that resulted in losses of nearly S$40 million last year. While the initial rollout is for iPhone users, Android support will follow. Existing authentication methods, including QR codes and SMS OTPs, will remain available. The passkeys are device-bound and will not sync via the cloud, reducing the risk of credential theft. A Bluetooth proximity check will also be implemented to prevent unauthorized access from distant devices.

Key Points: • Singpass passkeys launch on July 1, 2026, for iPhone users, enhancing security against phishing. • The passkey system uses a unique pair of encryption keys, improving protection for 5.5 million users. • Existing authentication methods will remain available, and Android support is planned for later.