Singpass is Singapore’s national digital identity, and for most residents it is the single key that opens almost everything the state and many businesses offer online. Run by the Government Technology Agency (GovTech), Singpass lets one login reach tax filing, health records, pension savings, housing applications, banking and document signing. As of mid-2026 it serves about 5.5 million users and connects to more than 1,400 government and private services, handling over 41 million transactions a month. For a country of fewer than six million people, that makes Singpass less an app and more a piece of shared infrastructure, as ordinary as the power grid.
One login for taxes, health, housing and banking
Before Singpass, every agency ran its own account. Residents juggled separate passwords for the tax authority, the pension fund, the health portal and the housing board, and each forgotten password meant a reset, a letter or a counter visit. Singpass replaced that tangle with one identity. Your Singpass ID is your NRIC number if you are a citizen or permanent resident, or your FIN number if you hold a foreign pass. The app’s shortcuts open the most used services directly: the Central Provident Fund (CPF) for retirement savings, the Inland Revenue Authority of Singapore (IRAS) for tax filing, HealthHub for medical appointments and records, and the Housing and Development Board (HDB) for public housing matters. Banks, insurers and telecom operators accept the same login too, so the identity you use for government works for much of daily commercial life as well. Businesses are covered through a related system, Corppass, which lets authorised officers act on behalf of a company with the same underlying identity rails.
MyInfo ends the form-filling
The feature that saves the most time is not the login itself but what sits behind it. MyInfo is a consented data service that stores verified personal details drawn from official records: name, date of birth, nationality, registered address and more. When you apply for something with a participating service, the form arrives already filled in, and you confirm each field rather than typing it from scratch. You give consent for each sharing, so no service pulls your data silently. MyInfo opened to the private sector in 2017, which is why opening a bank account or applying for insurance in Singapore often takes minutes instead of days. The design principle is simple and worth copying: the government already holds your verified details, so it should not ask you to retype them. Estonia applies the same once-only idea through its X-Road data exchange, as described in our look at Estonia’s once-only system, and Singapore shows the same idea working at the scale of a dense city-state.
Signing documents without a pen
Singpass also works as a signature. With Sign with Singpass, a person scans a QR code on a document, authenticates in the app, and the document is signed without printing, posting or meeting in person. The app also carries a Digital IC, a digital version of the national identity card that can be shown at counters and scanned at kiosks in libraries and polyclinics, and a Document Wallet for digital copies of licences and certificates. During the pandemic years this wallet held vaccination certificates, which shows how a digital identity system becomes more useful the more documents it can carry. For residents, the practical effect is that a rental agreement, an insurance form or a school consent letter can be completed from a phone while standing in a food court.
Security that keeps up with scams
A single key to everything is also a single target, and Singapore has felt that pressure. Phishing was the country’s second most common scam in 2025, with victims losing about S$39.9 million. Singpass defends itself in layers: two-factor authentication, face verification for high-risk transactions, and since 2026, passkeys. Passkeys replace passwords and one-time codes with device-bound credentials that cannot be reused on a fake website, because no reusable secret ever leaves the phone. GovTech began the rollout with a beta for iPhone users on 30 June 2026, and about 800,000 passkeys were registered by early September, followed by Android support. Desktop support was planned by the end of 2026. The feature is optional and sits alongside QR codes, SMS codes and face verification, which matters: a security upgrade that forces everyone at once tends to lock out the people who need the service most.
What Singapore got right, and what it still worries about
Three design choices explain why Singpass stuck. First, it is one identity for both government and business, so people use it constantly rather than once a year at tax time. Second, the data-sharing layer, MyInfo, gives users an immediate reward, a pre-filled form, in exchange for consent. Third, the mobile app arrived in 2018 and kept gaining features, from the Digital IC to notifications from agencies, so the habit deepened year by year. The worries are real too. A single identity system is a single point of failure if it goes down, and it raises the stakes of every data breach. People without smartphones or digital skills risk being left behind, which is why counters and assisted channels still exist. And no technical fix removes the human risk: scammers impersonate the service itself, so GovTech works with other agencies on public awareness alongside the technology. For Vietnam, where VNeID is becoming the same kind of single key, the lesson is that the login is the easy part. The hard part is making the identity useful every week, keeping it safe, and keeping an alternative open for everyone who cannot use a phone. The same design questions face payment systems, where India’s UPI made one shared rail work for hundreds of millions by keeping it open, interoperable and free at the point of use.
What this means
Singpass shows that a national digital identity works when it is boring. Nobody celebrates logging in; people celebrate the ten minutes they did not spend filling in a form or queuing at a counter. Singapore reached that point by building one identity, letting verified data flow with consent, and treating security as a continuous job rather than a launch feature. Any country building its own version, including Vietnam, should measure success the same way: not by how many people registered, but by how rarely anyone has to think about identity at all.