Q1. What are the identifiers returned to us after the authentication process?
NRIC/FIN numbers or User’s Universally Unique Identifier (UUID).
Please assess which identifier is appropriate for your use case taking into account applicable laws, regulations, guidelines, and industry circulars or notices. This includes the Advisory Guidelines on the Personal Data Protection Act for NRIC and Other National Identifiers (see here).
Q2. What is a UUID?
A Universally Unique Identifier (UUID) is a 128 bits-long identifier to uniquely identify a Singpass user.
Q3. Can I allow my users to log in with their Singpass usernames and passwords if they do not have the Singpass app?
No, as part of national scam-prevention efforts, new Singpass Login/Myinfo apps will only support QR Login. Password/SMS OTP login will no longer be offered.
Password/OTP logins on mobile browsers are much easier for scammers to exploit, especially when a device is infected or remotely controlled. QR Login is far more secure because the user must verify the login within the Singpass app, which has stronger protections.
Your end users/customers who prefer not to use QR login can still rely on the alternative login or form-filling options provided by your e-service.
Q4. Can foreigners use Login to transact with digital services?
Foreigners must be at least 15 years old and are either Permanent Residents (PRs) or Foreign Identification Number (FIN) holders with a valid Singpass account to use Login.
Q5. What are the charges/fees for using Login API?
Singpass Login API adopts a pay-per-transaction tiered pricing structure. You may log into the Singpass API Portal to view details of the price plan.
Q6. I am a financial institution. Is utilisation of Singpass API services subject to MAS’ expectations under the Guidelines on Outsourcing?
The Monetary Authority of Singapore (MAS) has issued a circular guidance to all financial institutions in June 2020 (see here). For outsourcing arrangements involving services which are wholly provided by the Government Technology Agency (GovTech) or agents appointed by GovTech, they will not be subject to the MAS Guidelines on Outsourcing. Please refer to the list of services here.
