Singapore government scraps physical 2FA tokens for government services

Singapore government scraps physical 2FA tokens for government services

There's an app for that. Or text, if you dare. Or even retail outlets


Singapore will bin the physical tokens used to provide two-factor authentication (2FA) for some digital government services.


The city-state operates "SingPass", a government service that connects Singapore's residents with 200 government services. SingPass helps residents to file taxes, apply for public housing, or checking the balance of their pension accounts.


In 2016, the government enabled two-factor authentication (2FA) for SingPass accounts to improve security. The measures required users to input a code from a physical "OneKey" token in addition to their regular password to access their accounts.


But today the government announced plans to scrap the physical tokens, which account for only two per cent of logins. New tokens and replacements will not longer be issued from October, and they will stop working entirely from April next year, the ..

Support the originator by clicking the read the rest link below.