Sign with Singpass
Singpass Developer DocsAsk a Question
  • START HERE
    • Why use us?
    • How do our Digital Signatures work?
    • Use Cases
    • Frequently Asked Questions
  • FOR USERS
    • How to sign
    • Verifying Sign with Singpass Signatures
      • Loading Singpass Root Signing Certificate
  • FOR DIGITAL SIGNING PARTNERS
    • Guiding Principles
    • Digital Signing Partners
      • Docusign
      • Tungsten Automation
      • OneSpan
      • Tessaract Technologies Pte Ltd
      • Netrust Pte Ltd
      • Modus Consulting
      • Redoc.co by Real Estate Doc Pte Ltd.
      • CrimsonLogic
      • Zoho Sign
      • Securemetric Technology Pte. Ltd.
      • Rently Pte. Ltd.
    • API Documentation
      • Document Signing
        • Document Signing API Specs
      • Transaction Signing
        • Introduction
        • Embedding Singpass JS
        • Init Transaction Signing
        • Exchange Transaction Signature
    • How to Onboard
Powered by GitBook
On this page
  • General
  • Authenticity

Was this helpful?

  1. START HERE

Frequently Asked Questions

PreviousUse CasesNextHow to sign

Last updated 2 months ago

Was this helpful?

General

Who can use Sign with Singpass?

Both government agencies and private businesses can integrate with Sign with Singpass. To join us as a digital signing partner, please visit the section.

Anyone with the Singpass App can sign documents using Sign with Singpass.

Is there any cost to using Sign with Singpass?

Sign with Singpass is currently free of charge, both for organisations integrating with us, as well as for signers.

Can I sign without a Singpass App?

No, you are required to have the Singpass App in order to sign documents.

Authenticity

How to verify signatures?

Refer to this on verifying signatures.

When I opened the document on Adobe PDF reader, it says that the signature is corrupted.
"Certificate validity is unknown"?
How can I know if my signature is secure and protected?

Digital signatures rely on public-key cryptography, a method that uses a pair of keys:

  • Private Key: A secret key known only to the signer. It is used to create the signature.

  • Public Key: A key that is made publicly available through the Singpass signing certificate. It is used to verify the signature.

Private keys are stored securely on the Singpass mobile app and can only be accessed by the user.

Furthermore, it is computationally infeasible to replicate the cryptographic process (hashing and encryption) used to generate the signature.

Lastly, the signer's public key is validated by Singpass. Singpass verifies the identity of the signer and that the public key is associated with the correct person.

If the signer migrates, will the signature still be valid?

Yes. The document can be traced back to the signer.

What is the difference between Secure Electronic Signatures and Ordinary Electronic Signatures?

Ordinary Electronic Signatures (OES) is a broad category that refers to electronic signatures that are not SES.

Under Section 19 of the Electronic Transactions Act (2010), secure electronic signatures are accorded the following presumptions:

(a) the secure electronic signature is the signature of the person to whom it correlates; and

(b) the secure electronic signature was affixed by that person with the intention of signing or approving the electronic record.

If I delete my Singpass account, will my signature still be valid?

Yes, the signature will continue to be valid.

Can a document's details be altered after it is signed?

If there are unauthorised modifications to the document after it is signed, the digital signature will be invalid.

As digital signatures are cryptographically linked to the signed document through a hash, the hash value will change if there are unauthorised modifications to the document after signing, and the signature will be deemed to be invalid.

Refer to this on verifying signatures. When downloading the document onto your device, please ensure that you do not have a firewall that is modifying the file in transit (content disarm and reconstruction), as that will affect the integrity of the signature.

If you see "Certificate validity is unknown", this is because you do not have the Singpass root signing certificate on your device. Please refer to this to install the Singpass root signing certificate.

If you have a question and are unable to find an answer in this FAQ, please submit your question on our to seek further assistance.

onboarding
section
section
guide
Source
Singpass Q&A site