SINGAPORE - From July 5, two-factor authentication (2FA) will be compulsory for all sensitive e-transactions with the Central Provident Fund Board, Inland Revenue Authority of Singapore, Ministry of Manpower, and Accounting and Corporate Regulatory Authority.
The process uses a randomly generated one-time password (OTP) delivered via SMS or a token that looks like a mini-calculator. The OTP must be entered in addition to the usual SingPass - a password set up since 2003 - and NRIC number for accessing e-government services.
Here's how to set up SingPass 2FA, if you haven't already done so:
1. If you have not registered for 2FA, or do not know how to navigate the labyrinthine steps, do not panic. The Infocomm Development Authority (IDA), which administers SingPass, said it will send letters containing a PIN code to Singapore residents to help them enrol. Wait for the letters, which will come in batches.
2. Once you have received the PIN via snail mail, use it to activate the 2FA by July 4. This involves entering the PIN and NRIC number on the website of IDA's subsidiary Assurity Trusted Solutions, which supplies the 2FA system. Those with Singapore mobile numbers registered on SingPass' website can also activate their 2FA via SMS.
Send an SMS to 78111 with the message:
ACT(space)SMS(space)NRIC(space)PIN in mailer. This will activate SMS as the medium for receiving the OTP.
To activate the calculator-like token called OneKey issued by Assurity, the message is:
ACT(space)Token(space)NRIC(space)PIN in mailer(space)OTP generated from the token.
To activate both, the message is:
ACT(space)Both(space)NRIC(space)PIN in mailer(space)OTP generated from the token.
3. Overseas Singaporeans will not receive the letters containing the PIN automatically. They must go to SingPass' website to register for the 2FA. Their only option is the token as the OTP cannot be sent to a foreign mobile number.
Their overseas addresses must also be registered with the Immigration and Checkpoints Authority for them to get their PIN letter and token. Then, they must enter the PIN and NRIC number on Assurity's website to activate the 2FA feature.