Cybersecurity experts have welcomed the government’s plan to introduce redesigned MyKad and passports by the middle of this year, but have stressed that stronger oversight and enforcement are needed to ensure the new documents are truly secure.
Home Minister Datuk Seri Saifuddin Nasution Ismail said on Jan 8 that the new MyKad and passports will feature enhanced security measures aimed at preventing forgery and security breaches.
Cybersecurity expert and Digital Ihsan founder Aaron Ikram Mokhtar supported the move but pointed out several weaknesses in the current MyKad system. These include the absence of a “kill switch” to immediately deactivate lost or replaced cards, as well as inconsistent identity verification standards across banks, telecommunications companies and other service providers.
“Every generation of MyKad should have a maximum lifespan, for example eight to 10 years, along with a clear and enforced migration plan,” he told the New Straits Times.
Aaron Ikram added that older cards must be properly deactivated to prevent misuse during the transition to the new system.
“Citizens should be able to instantly suspend their MyKad through a secure portal and access a log showing when and by whom their ID was verified.
“This would turn users into active participants in security, rather than passive victims,” he said.
He also suggested that the MyKad chip support selective data disclosure, allowing users to verify specific information — such as being over 18 or confirming citizenship — without revealing unnecessary personal details like full birthdates or addresses. This, he said, would help limit data leaks and reduce the impact of breaches.
Meanwhile, LGMS founder and executive chairman Fong Choong Fok stressed the importance of training officers involved in verification to prevent abuse during the rollout.
“Even the most advanced card can be misused if the systems and personnel verifying it are weak,” he said, adding that proper training and monitoring at enforcement points are critical during the transition period.
Saifuddin had earlier assured that existing MyKad and passports will remain valid until their expiry dates, and that the public does not need to rush to replace their current documents.
