Stay Safe Online

Passwords & 2FA Made Easy

Learn how to create strong passwords and add an extra layer of safety to your accounts.


Keeping Your Accounts Safe

A strong password is like a good lock on your front door. Two-factor authentication (2FA) adds a second lock. In Singapore, this is especially important for your SingPass, CPF, and internet banking accounts.

Step 1: Create a strong password

  1. Use at least 12 characters in your password.
  2. Mix uppercase letters, lowercase letters, numbers, and symbols.
  3. Do not use your NRIC number, birthday, or simple words like "password".
  4. Use a different password for each account.

Tip: Think of a short sentence you can remember — for example: "ILoveLaksa@Chinatown2025" — this is long, memorable, and hard to guess.

Step 2: Store your passwords safely

  1. Consider using a password manager app (like Bitwarden — it is free and safe).
  2. A password manager remembers all your passwords so you only need one main password.
  3. You can also write passwords in a notebook kept in a safe place at home — not near your computer.

Step 3: Turn on 2FA for SingPass

  1. Log in to your SingPass account at app.singpass.gov.sg.
  2. Go to "Profile" and then "Security settings".
  3. Turn on SingPass Face Verification or the Singpass app as your second factor.
  4. Each time you log in, you will confirm with your face or the app — this keeps your account safe.

Step 4: Set up 2FA for your bank

  1. All major Singapore banks — DBS, OCBC, UOB, and POSB — support 2FA.
  2. Go to your bank's app or website and look for "Security" settings.
  3. Enable transaction alerts via SMS or the bank's app so you know about every payment.

Remember: A real bank or government agency will never ask for your full password or One-Time Password (OTP) over the phone.

Watch: How to create a strong password and stay safe online
Try it yourself — strengthen your accounts today Click to expand

Follow along and tick each step as you go. You can use a real device right now!

✨ Tip: Ticking these boxes only works on your screen — nothing is saved or sent anywhere.