National Digital Identity and Singpass

Singapore's National Digital Identity (NDI) is an identity ecosystem for secure access to public and private-sector digital services. Singpass is the resident-facing trusted digital identity and authentication service within that ecosystem; GovTech describes it as a way for residents to access government and business services online, prove identity, use Digital IC features and sign documents (GovTech Singapore — Singpass, accessed 18 Aug 2026; GovTech Singapore — Digital identity, accessed 18 Aug 2026). The terms are related but should not be collapsed: Singpass authenticates or proves an identity, Myinfo supports consent-based retrieval of verified personal data, and Corppass serves authorised business users. A successful Singpass login is therefore evidence of an authenticated user, not automatic proof that the user meets every separate service's eligibility, licensing or account conditions.

Singpass authentication and the Singpass app

Singpass lets eligible users log in to participating services using the Singpass app, biometrics, Face Verification, or SMS two-factor authentication, depending on the available flow (GovTech Singapore — Singpass, accessed 18 Aug 2026). The Singpass app also supports shortcuts to common services, notifications, Digital IC presentation at some government counters, QR-based identity proof and digital signatures where the receiving organisation offers the relevant function. GovTech's registration guidance states that a person must generally be at least 15 and be a Singapore citizen, permanent resident or Foreign Identification Number (FIN) holder, with address and identity details meeting the registration requirements (Singpass registration guidance, accessed 18 Aug 2026). These access routes are authentication mechanisms, not a replacement for a passport, identity card or other physical document where a law or service specifically requires one.

Myinfo is consent-based data sharing, not the Singpass password

Myinfo is the data-sharing layer associated with the NDI ecosystem. It allows a user, with consent, to retrieve government-verified personal information for a participating transaction, reducing repeated form filling and enabling a service provider to receive selected data rather than asking the user to retype it (GovTech Singapore — Myinfo, accessed 18 Aug 2026). The user should check what information a transaction requests and which organisation is receiving it. Myinfo is not simply a public database exposed by Singpass, and Singpass is not synonymous with Myinfo: one addresses identity authentication while the other concerns consented data provision. A service may offer Singpass login without requesting Myinfo data, or use Myinfo in a flow whose final approval still depends on the service provider's own rules, risk checks and statutory requirements.

Corppass and business identity

Corppass is the business-facing identity and access layer for entities and their authorised users. It lets an authorised individual transact with government digital services on behalf of a business or other entity, subject to the entity's registration and the user's assigned access rights (Corppass — Consumer guide, accessed 18 Aug 2026; GovTech Singapore — Digital identity, accessed 18 Aug 2026). That role differs from using a personal Singpass account for an individual's CPF, healthcare, housing or tax transaction. A person can be authenticated personally and still lack authority to act for a company; conversely, a Corppass role can authorise an employee to access selected corporate services without changing the individual's underlying citizenship, immigration or professional eligibility. Answers about business filings should therefore identify the entity, the authorised user and the assigned digital-service permissions rather than treating Corppass as a second personal Singpass account.

Security, inclusion and service boundaries

Singpass is an identity credential and should be protected like a high-value account. GovTech warns users not to give Singpass credentials or two-factor authentication details to others and notes that misuse of an account for criminal activity can create legal consequences (GovTech Singapore — Singpass, accessed 18 Aug 2026). Users should enter credentials only on an official or expected service flow, inspect consent screens before sharing Myinfo data, and use official recovery or support channels after a suspected compromise. Digital identity also has an inclusion boundary: a person may be unable to use a particular app, biometric or SMS route and may need the service's alternative channel. Finally, NDI does not eliminate the substantive rules of the destination service. A Singpass login does not itself guarantee a housing grant, bank account, licence, healthcare subsidy, work pass, benefit or other entitlement; the service's agency or provider still decides under its own requirements.