SingPass users can now verify identity by scanning their faces

SINGAPORE - Residents are now able to verify their SingPass account identity by scanning their faces using computers and camera phones, or by inputting a one-time password sent to another trusted SingPass user.

These two features are made available to all SingPass users accessing government digital services from Wednesday (Dec 16).

They come as an addition to existing verification methods such as the SingPass Mobile App and the SMS-One Time Password (OTP), announced the Government Technology Agency of Singapore (GovTech) in a statement on Wednesday (Dec 16).

To make use of the face verification feature, SingPass users will still need to input their usernames and passwords when logging into their accounts.

They then authenticate their identities by scanning their faces on an Internet-enabled computer with a web camera, or a mobile device with a front-facing camera. This verification feature was previously only available to users who are setting up the SingPass Mobile app on their smartphones.

Mr Kwok Quek Sin, GovTech's senior director of national digital identity, said the agency recognises that some users are not as digitally savvy and cannot navigate smartphones or computers.

"SingPass Face Verification as an alternative 2FA (two-factor authentication) will be especially useful as it reduces the need to key in additional information like One-Time Passwords (OTPs). This option also serves our overseas Singaporean community who might not have a locally registered number and are unable to receive SMS-OTPs," said Mr Kwok.

Those without the appropriate devices can visit selected locations such as Our Tampines Hub's Public Service Centre or the Central Provident Fund Board's Bishan Service Centre, to make use of the new identity verification methods.

To prevent fraud, a technology is used to detect and block the use of photographs, videos or masks during the verification process, said GovTech.

[[nid:503938]]

Users can also verify their identities by opting for their OTPs to be sent to another trusted user via SMS. The other user can then assist the original user in completing their transactions.

"For example, an elderly parent can choose to link his account to his child's mobile number. With this, the child receives his parent's SMS-OTP when the parent is transacting with SingPass," said GovTech in its statement.

This option can be activated at any SingPass counter, and both parties must be present with their NRIC or FIN to prove that they are aware and accept the terms of use.

The two new verification features were launched ahead of the decommissioning of the OneKey token in end-March next year, said GovTech.

"We are actively facilitating the remaining 120,000 OneKey token users to transit to these alternative 2FA methods, through direct mail, digital clinics and digital ambassadors," said GovTech.

This article was first published in The Straits Times. Permission required for reproduction.