Add passwordless setup and sign-in #385

rvzakngh · 2025-12-05T10:14:26Z

Changes:

Update "Get invited and onboard to TechPass" page to add Step 7 for passwordless
- Initially wanted to have passwordless step after MFA, but as this is first-time sign-in, it is better to let the first-time sign-in process (force change password and tnc) fully completed. So add passwordless as last step
Log in with TechPass, restructure a bit
- Existing separates sign-in to service and to TechPass Portal as a separate steps, but actually are the same
- So combine and separate instead based on the authentication methods

How it looks like:

yilunyou · 2025-12-12T13:01:01Z

docs/get-invited-and-onboard-to-techpass.md

-## Step 3: Configure Multi-Factor Authentication (MFA) for TechPass account
+## Step 4: Configure Multi-Factor Authentication (MFA) for TechPass account

 ?> This section guides you to configure Microsoft Authenticator as your MFA. We recommend Microsoft Authenticator for the following reasons:<br>- It supports **Number Matching** to protect you from MFA Fatigue attacks and increases the security of your account.<br>- Microsoft constantly improves its MFA security policies to protect its users.


Suggested change

?> This section guides you to configure Microsoft Authenticator as your MFA. We recommend Microsoft Authenticator for the following reasons: - It supports **Number Matching** to protect you from MFA Fatigue attacks and increases the security of your account. - Microsoft constantly improves its MFA security policies to protect its users.

?> This section guides you to configure Microsoft Authenticator as your MFA. Microsoft Authenticator is required for the following reasons: - It supports "Passwordless" sign ins. - It supports **Number Matching** to protect you from MFA Fatigue attacks and increases the security of your account. - Microsoft constantly improves its MFA security policies to protect its users.

**Note:** TechPass accounts will be secured using Passwordless sign ins via MS Authenticator.

Authy and Google Authenticator will not be supported.

Raise a [ticket](https://go.gov.sg/seed-techpass-support) with us if there are special circumstances where you cannot bring your mobile device into your office premises.

can help me format it abit?

yilunyou · 2025-12-12T13:09:41Z

Can I ask ah.. we can configure the mobile authenticator to turn on biometrics before entering the app and after entering number for number matching. I don't see the instructions and no screenshots.. can we not turn it on?

yilunyou · 2025-12-12T13:02:32Z

docs/get-invited-and-onboard-to-techpass.md

-### Next step
+
+## Step 7: Enable Passwordless sign-in in mobile app
+?> This section guides you to configure Passwordless sign-in using Microsoft Authenticator.


Suggested change

?> This section guides you to configure Passwordless sign-in using Microsoft Authenticator.

?> This section guides you to configure Passwordless sign-in using Microsoft Authenticator.

**Benefits of Passwordless Authentication**

[Passwordless authentication](https://www.microsoft.com/en-sg/security/business/solutions/passwordless-authentication) offers several advantages over traditional password-based systems:

- Reduced attack surface: Eliminates risks from password theft, reuse, phishing, and brute-force attacks.

- Improved user experience: Users do not need to remember complex passwords or manage frequent resets. Authentication is faster and less error-prone.

- Stronger security posture: Modern passwordless methods use cryptographic keys, biometrics, and device-bound credentials, which are more secure than passwords.

- Simplified access: Users can securely access corporate resources from various devices, supporting organizational security policies.

More Info: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-passwordless-phone

can help me format it abit?

yilunyou · 2025-12-12T13:10:10Z

docs/get-invited-and-onboard-to-techpass.md

-## Step 3: Configure Multi-Factor Authentication (MFA) for TechPass account
+## Step 4: Configure Multi-Factor Authentication (MFA) for TechPass account

 ?> This section guides you to configure Microsoft Authenticator as your MFA. We recommend Microsoft Authenticator for the following reasons:<br>- It supports **Number Matching** to protect you from MFA Fatigue attacks and increases the security of your account.<br>- Microsoft constantly improves its MFA security policies to protect its users.


can help me format it abit?

yilunyou · 2025-12-17T07:53:07Z

docs/log-in-with-techpass.md

+4. Select **Yes** or **Done** on the app.
+
+   You have successfully logged in to the service using your TechPass account.
+


Let's add the step to use biometrics for App lock

…cators

rvzakngh · 2025-12-23T07:48:16Z

Added app lock step (step 8, after enabled passwordless)

…info

…s-transition Add passwordless setup/transition for existing account

…rify passwordless if not setup properly

rvzakngh · 2025-12-24T02:18:57Z

Screen recording for FAQ and verify passwordless setup

doc-passwordless-faq-20251224.mp4

rvzakngh · 2025-12-24T02:52:30Z

Updated screen recording for newly onboarded + transition

doc-passwordless-new-and-transition-20251224.mp4

Add passwordless setup and sign-in

001c914

rvzakngh requested review from JLeeChan, kpslp and yilunyou December 5, 2025 10:14

rvzakngh self-assigned this Dec 5, 2025

rvzakngh added 2 commits December 12, 2025 13:45

passwordless - use same screenshot for ios and android

db9ef62

Add passwordless transition

700f8e2

yilunyou reviewed Dec 12, 2025

View reviewed changes

yilunyou reviewed Dec 17, 2025

View reviewed changes

rvzakngh added 6 commits December 23, 2025 10:23

address MR commments and update screenshots

c006bb5

add benefit of passwordless in transition page

12fe602

address MR comments, add benefits and warning of using other authenti…

ba5a28a

…cators

add benefits in transition page and minor edit for clarity

ece9c6d

passwordless - add app lock

936ab56

add app lock to onboard page

5856273

rvzakngh added 5 commits December 23, 2025 17:54

passwordless - add some links for steps requiring access to security …

7bb7e0d

…info

Merge pull request #386 from GovTechSG/andy-techpass-5432-passwordles…

5c2d1b1

…s-transition Add passwordless setup/transition for existing account

passwordless faq

a3538f8

add more faq, minor typo/fix/formatting in transition and verify

e2b868b

correction as suggested by AI and also add recovery suggestion for ve…

ebb2509

…rify passwordless if not setup properly

-?> This section guides you to configure Microsoft Authenticator as your MFA. We recommend Microsoft Authenticator for the following reasons:<br>- It supports **Number Matching** to protect you from MFA Fatigue attacks and increases the security of your account.<br>- Microsoft constantly improves its MFA security policies to protect its users.
+?> This section guides you to configure Microsoft Authenticator as your MFA. Microsoft Authenticator is required for the following reasons:<br>- It supports "Passwordless" sign ins. <br>- It supports **Number Matching** to protect you from MFA Fatigue attacks and increases the security of your account.<br>- Microsoft constantly improves its MFA security policies to protect its users.
+**Note:** TechPass accounts will be secured using Passwordless sign ins via MS Authenticator.
+Authy and Google Authenticator will not be supported.
+Raise a [ticket](https://go.gov.sg/seed-techpass-support) with us if there are special circumstances where you cannot bring your mobile device into your office premises.

-?> This section guides you to configure Passwordless sign-in using Microsoft Authenticator.
+?> This section guides you to configure Passwordless sign-in using Microsoft Authenticator.
+**Benefits of Passwordless Authentication**
+[Passwordless authentication](https://www.microsoft.com/en-sg/security/business/solutions/passwordless-authentication) offers several advantages over traditional password-based systems:
+- Reduced attack surface: Eliminates risks from password theft, reuse, phishing, and brute-force attacks.
+- Improved user experience: Users do not need to remember complex passwords or manage frequent resets. Authentication is faster and less error-prone.
+- Stronger security posture: Modern passwordless methods use cryptographic keys, biometrics, and device-bound credentials, which are more secure than passwords.
+- Simplified access: Users can securely access corporate resources from various devices, supporting organizational security policies.
+More Info: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-passwordless-phone

		4. Select Yes or Done on the app.

		You have successfully logged in to the service using your TechPass account.

Add passwordless setup and sign-in #385

Are you sure you want to change the base?

Add passwordless setup and sign-in #385

Uh oh!

Conversation

rvzakngh commented Dec 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

yilunyou Dec 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

yilunyou Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

rvzakngh Dec 23, 2025

Choose a reason for hiding this comment

Uh oh!

yilunyou commented Dec 12, 2025

Uh oh!

yilunyou Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

yilunyou Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

rvzakngh Dec 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

yilunyou Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

yilunyou Dec 17, 2025

Choose a reason for hiding this comment

Uh oh!

rvzakngh commented Dec 23, 2025

Uh oh!

rvzakngh commented Dec 24, 2025

Uh oh!

rvzakngh commented Dec 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

rvzakngh commented Dec 5, 2025 •

edited

Loading

yilunyou Dec 12, 2025 •

edited

Loading

rvzakngh Dec 23, 2025 •

edited

Loading