MyDigital ID Guide

MyDigital ID is Malaysia's national digital identity, run by the National Digital Department (Jabatan Digital Negara, JDN) under the Ministry of Digital. It's a government-issued credential that lets you sign into government and (increasingly) private-sector services from your phone, without a separate password for each one.

Think of it as **a verified version of MyKad for online use**. Where MyKad proves who you are at a counter, MyDigital ID proves who you are when logging into apps and websites.

Key facts:

• Free to register and use.
• Citizens (and PR holders) aged 18+ are eligible.
• Optional today, but becoming mandatory for specific services through 2026.
• Single sign-on for over 100 government services (LHDN, EPF, JPJ, PERKESO, MyEG, MySejahtera, JPN, and many more).
• Does not replace MyKad, physical IC is still required for most in-person transactions.
• Does not store new personal data about you (per official statements), it only verifies that you are who you say you are.

Why it exists: government services were a mess of separate logins, passwords, and weak ID checks. MyDigital ID is the federal answer, one verified identity, used everywhere. The longer-term goal is 95% of public services integrated by 2030, plus optional integration with private-sector services (banks, telcos, e-wallets).

Through 2025-2026, MyDigital ID has shifted from "nice to have" to "you need it". The dates that affect ordinary Malaysians:

If you actively use any of these, and most Malaysians use at least JPJ services for road tax, registration is no longer optional in practice.

Important caveat: Registration itself is not yet legally mandatory. The government has not passed a law forcing every adult to enrol. But the services are being mandated to use MyDigital ID exclusively, which has the same practical effect for users of those services.

Registration takes ~10-30 minutes depending on whether you use the app-only path or visit a kiosk for in-person verification.

Method 1: App-only (fastest, requires NFC phone)

1. Download the MyDigital ID app from the App Store, Google Play, or Huawei AppGallery.
2. Open the app and select "Daftar" (Register).
3. Enter your MyKad number and basic details.
4. Scan your MyKad using your phone's NFC (place the back of your phone on the chip side of MyKad).
5. Take a selfie video for liveness detection.
6. Wait for verification (usually a few minutes).

Method 2: Kiosk verification (for users without NFC, or whose app verification fails)

1. Download and start registration on the app as above.
2. When prompted for verification, choose "Kiosk verification".
3. Visit one of the verification points:
4. NADI centres (National Information Dissemination Centres, formerly PEDi/Pusat Internet Komuniti), over 900 community digital centres nationwide
5. Sentuhan MADANI Kiosks, self-service kiosks for 100+ government services. Major locations include Alamanda Putrajaya, KL Sentral, and 1 Utama; rolling out at more sites through 2026
6. Selected Tealive outlets, partnership with the F&B chain to host MyDigital ID kiosks
7. Selected JPN counters, National Registration Department
8. Selected UTC (Urban Transformation Centres)
9. Bring your physical MyKad and let the officer scan your fingerprint.
10. Verification completes within ~5 minutes; activation in the app within an hour.

What you'll need:

• A working Malaysian smartphone with internet access.
• Your MyKad (physical card).
• A valid Malaysian phone number (for SMS OTP).
• ~10 minutes (app) or ~30 minutes (kiosk + travel).

Common gotchas:

• iPhone users: NFC scanning works on iPhone 7 and newer, but earlier iOS versions may have issues, update to latest iOS first.
• MyKad (chip-based) was introduced on 5 September 2001. If you still hold the older pre-MyKad IC (no chip, issued before that date), you must use kiosk verification or get a MyKad replacement at JPN first.
• The selfie video must be done in good lighting with a plain background, failures here are common.

As of early 2026, over 100 government services are integrated with MyDigital ID. Here are the major ones you'll likely use:

Identity & Civil Records

• MyJPN, National Registration Department app (birth/marriage/death records, name changes, MyKad replacement applications)

Tax & Income

• LHDN MyTax / e-Filing, Income tax filing and assessment
• HASiL portal, All tax-related services

Vehicles & Transport

• MyJPJ, Digital driving licence, digital road tax disc, summons, vehicle ownership records (becomes MyDigital ID-only on 1 Feb 2026)
• JPJeBid, Vehicle plate number bidding

Health

• MySejahtera, Vaccination records, health screening, child health profile
• MyHEALTH portal, Public hospital appointments

Employment & Retirement

• EPF i-Account (KWSP), Retirement savings, withdrawals, contribution history
• PERKESO portal, SOCSO contributions and claims
• JobsMalaysia, Government employment portal

Travel & Immigration

• MyNIISe, Immigration app (becomes MyDigital ID-only on 15 Jan 2026)
• MyTravelPass, Visa and travel applications

These immigration services connect to your passport records and visa applications for departures and entry.

Welfare & Subsidies

• JPS / Sumbangan Tunai Rahmah (STR), Cash aid programmes
• SADIA / Bantuan Asnaf, Various welfare grants

General Government Services

• MyEG, Road tax renewal, summons check, foreign worker permits, etc.
• PADU (Pangkalan Data Utama), National central database registration

Telco / Private Sector (newer)

• All telco apps (CelcomDigi, Maxis, U Mobile, Yes) now use MyDigital ID for prepaid SIM verification
• Banks and e-wallets are expected to integrate gradually through 2026-2027

This list is growing fast. The official up-to-date list is at digital-id.my.

MyDigital ID has not been universally welcomed. Civil society groups, lawyers, and a sizeable number of Malaysians have raised legitimate concerns. Here is the case against, presented neutrally:

1. Track record on government data security

Malaysia's record on data breaches is poor and getting worse: the Ministry of Digital reported a 1,192% rise in breach cases between 2022 and 2023 (50 to 646), and ransomware incidents jumped 153% in 2024 (Kaspersky). Past leaks have included MyKad data, election rolls, and EPF records. Critics ask whether centralising more identity into one digital credential is wise given that history.

2. PDPA does not protect you against government leaks

Malaysia's Personal Data Protection Act 2010 explicitly excludes the federal and state governments from its scope. If MyDigital ID data leaks from a government system, the agency responsible has no legal obligation to notify you, and faces no statutory penalty under the PDPA. Civil suits are theoretically possible but practically rare.

3. MIMOS audit findings (2024)

A federal audit of MIMOS (the agency building MyDigital ID infrastructure) found RM28 million in unauthorised spending and shortfalls in security and project-management practices. While this doesn't prove the system is insecure, it raised governance concerns.

4. Linkage to social media regulation

Under the Online Safety Act 2024 and related proposals, MyDigital ID could be used to verify social media accounts, meaning your real name and IC could be permanently tied to your online posts. Privacy advocates argue this would chill speech, especially political speech.

5. Single-point-of-failure concern

A login compromise on MyDigital ID could potentially expose dozens of services at once, banking, tax, EPF, immigration. Multi-factor authentication is in place, but the attack surface is broader than a per-service login.

6. Mandatory-by-stealth concern

Although enrolment isn't legally mandatory, mandating it for individual services (MyJPJ, MyNIISe, etc.) achieves the same effect for active citizens. Some lawyers argue this should be debated in Parliament before becoming de facto compulsory.

The government's response:

JDN and the Ministry of Digital have stated that:

• MyDigital ID does not store new personal data, it only verifies existing MyKad data.
• It does not track your online activity.
• Users can review and delete their account.
• A formal data-protection law amendment is under consideration to extend PDPA to government bodies.

What you can do:

• Be aware of what services you connect to MyDigital ID.
• Use the strongest device-level security available (biometric + strong PIN).
• Review your linked services and disconnect those you don't use.
• If you're worried, defer registration until the deadline for a service you actually use.

Tourists: You do not need MyDigital ID. The relevant equivalent for tourists is MDAC (Malaysia Digital Arrival Card), which is a single-use immigration form, not an identity. Complete it online before arrival.

Permanent Residents (PR): Eligible for MyDigital ID using your PR identity card. Same registration process as citizens, but verification at a kiosk may be required if your card lacks an NFC chip.

Long-term expats (Employment Pass, MM2H, etc.): As of early 2026, MyDigital ID is not generally available to non-PR foreigners. Some specific government services accept passport-based logins separately. Check each service's help page if you're unsure.

Foreign workers and dependents: Not eligible. Continue using existing service-specific logins (e.g. MyEG's i-Pekerja for foreign worker permits).

Spouse of Malaysian (Long-Term Social Visit Pass): Currently not eligible directly. Some services accept Malaysian-spouse-mediated access; check with the specific service.

If you're not eligible and a service moves to "MyDigital ID only" (as MyJPJ is doing), you may need to use the in-person counter alternative, JPJ branches, LHDN counters, etc. still accept walk-in service for most things.

App won't scan my MyKad with NFC

• Make sure NFC is enabled in your phone settings.
• Place the back of the phone on the chip side of MyKad, not the photo side.
• Remove your phone case.
• iPhone: app must be in the foreground; it cannot scan in background.
• If still failing, switch to kiosk verification.

Selfie/liveness check fails

• Use plain, well-lit background (white wall is ideal).
• Remove glasses, hats, and masks.
• Look directly at the camera, follow the prompts (turn head left, right, blink).
• Try a different phone if your camera is poor quality.

"MyKad not found" error

• Pre-MyKad ICs (issued before MyKad rollout in September 2001) lack chips and cannot be NFC-scanned. You must use kiosk verification or replace your IC with MyKad at JPN first.
• If you've recently replaced your MyKad, the JPN database may not have synced, wait 24-48 hours and retry.

Lost phone with MyDigital ID

• Sign in to the MyDigital ID portal from a desktop browser.
• "Manage devices" → revoke access from the lost device.
• Re-register on your new phone using the same MyKad.

Forgot PIN

• Use "Reset PIN" in the app, requires re-doing biometric + selfie verification.
• If biometric is also locked out: visit a kiosk to reset in person.

Account locked after too many failed attempts

• Wait 24 hours and retry, OR visit a kiosk for unlock.

Service won't accept my MyDigital ID

• The service may not yet be integrated. Check the official service list before assuming MyDigital ID works for it.

MyDigital ID sits on top of the identity you already hold. It removes the need for separate usernames and passwords across government portals, and it standardises how an agency confirms that the person logging in is really you. Here is what changes and what stays the same.

What it replaces or absorbs:

• The patchwork of individual portal logins (LHDN e-Filing ID, EPF i-Akaun password, MyEG account, separate JPJ credentials). Over time these fold into one MyDigital ID sign-in.
• Weaker identity checks at first login. Many older portals only asked for a MyKad number and a self-set password. MyDigital ID front-loads a biometric and MyKad chip verification, so the account is bound to a verified person.
• Repeated identity proofing. Once you have verified once, connected services trust that verification instead of asking you to upload documents again.

What it does not replace:

• MyKad. The physical chip card is still your legal proof of identity for banking, in-person counters, police checks, and hotel check-in. MyDigital ID is the online companion to it, and it reads from the same MyKad data.
• MySejahtera, MyJPJ, MyTax and the rest. These apps continue to exist and hold your records. MyDigital ID is only the front door you walk through to reach them.
• Your bank login or e-wallet PIN. Banks and e-wallets remain on their own credentials for now. Any future MyDigital ID sign-in for them would be an added option decided by each institution.
• PADU. The Central Database Hub (Pangkalan Data Utama) is a data-consolidation project run by the Department of Statistics Malaysia (DOSM) for subsidy targeting. It is a different thing from MyDigital ID, though you may log into the PADU portal using MyDigital ID.

The short version: MyDigital ID is a verified login layer. It does not take custody of your records, and it does not retire the physical MyKad.

Malaysians juggle several government identity systems, and the names blur together. This table separates them so you know which one does what.

The point of confusion for most people is MyKad versus MyDigital ID. MyKad is the card in your wallet. MyDigital ID is the verified way to prove you hold that card when you are online. You keep both.

Eligibility comes down to your legal status and your age. This matrix covers the common cases people ask about.

Two edge cases worth calling out. First, a citizen who holds only a pre-MyKad IC (the older card issued before 5 September 2001, with no chip) cannot use NFC and must verify at a kiosk or replace the card at JPN first. Second, a Malaysian living abroad can still register through the app if they have an NFC phone and a Malaysian number for the SMS one-time password, which matters ahead of the MyNIISe deadline for departing Malaysians.

If you use any of the affected services, the safest move is to register once and be done. This plan maps the action to each date so nothing catches you out.

A practical tip: register during a quiet moment at home with an NFC phone rather than at the counter on deadline day. Kiosks and NADI centres see queues in the final week before each cut-off. If your app verification fails, you still have the kiosk fallback, so start early enough to use it.

Not every mandated service pushes on you equally. To rank them, we built the Lock-In Pressure Score (LPS), a 0 to 100 index computed from three factors in this guide: how many adults use the service (reach), how awkward the offline fallback is (friction), and how close the deadline sits (proximity, as of publication in 2026). Each factor is scored qualitatively from the rollout facts above, then combined into a single figure. Higher means the service leaves you less room to avoid registering.

Read it this way: MyJPJ scores highest because almost every vehicle owner touches road tax, so the mandate reaches the widest group even though a counter fallback exists. MyNIISe scores lower on reach because it only bites when you are leaving the country, though for frequent travellers it feels absolute.

Caveat: the scores are our own qualitative estimates built from the rollout facts in this guide, not an official government metric. They are meant to help you prioritise, and they will shift as more services move to MyDigital ID and as counter fallbacks are withdrawn. Treat the ranking as a guide, not a measurement.

Most failed registrations trace back to a handful of avoidable errors. Watch for these.

• Paying a middleman. Registration is free. Anyone charging a "processing fee" or offering to register on your behalf for money is running a scam. The only official channels are the app and the kiosks listed above.
• Scanning the wrong side of MyKad. The NFC chip sits under the photo side. Rest the back of your phone flat against the card and hold still for a few seconds.
• Leaving the phone case on. Thick or metal-lined cases block NFC. Remove the case before scanning.
• Poor lighting on the selfie. The liveness check fails in dim rooms or with busy backgrounds. Face a window or a plain white wall.
• Using a shared or foreign phone number. The SMS one-time password must reach a number you control. A recycled or family-shared number causes silent failures.
• Assuming a service accepts it before checking. Not every portal is integrated yet. Confirm on digital-id.my before you expect a given service to take your MyDigital ID.
• Ignoring a recent MyKad replacement. If you replaced your card in the last day or two, the JPN database may not have synced. Wait 24 to 48 hours and retry, or verify at a kiosk.
• Waiting until deadline day. If the app path fails, the kiosk fallback needs travel and possibly a queue. Start with a few days of buffer.

These are forward-looking predictions rather than guarantees. The trajectory for MyDigital ID points toward a genuinely more convenient, more secure digital life for Malaysians over the next few years.

One login for nearly everything. By 2028, expect the bulk of the 95%-by-2030 target to be in reach, paying road tax, filing taxes, checking EPF, booking hospital appointments and renewing licences all behind a single, password-free sign-in.

Registration gets faster and friendlier. Improved NFC reliability, better liveness checks and a fast-growing network of NADI centres, Sentuhan MADANI Kiosks and partner outlets should make enrolling a five-minute job for almost everyone by 2027.

Stronger privacy guardrails arrive. The widely discussed extension of the PDPA to cover government bodies is likely to be enacted, finally giving citizens statutory protection and breach-notification rights, directly addressing today's biggest criticism.

Seamless private-sector integration. Expect banks, e-wallets and telcos to adopt MyDigital ID for instant, paperless KYC by 2027-2028, so opening an account or a MyEG service is a tap-and-confirm experience rather than a document-upload chore.

Smarter, safer authentication. Passkeys, on-device biometrics and AI fraud-detection should make the single-sign-on both more convenient and harder to compromise than the patchwork of weak passwords it replaces.

Malaysia as a regional digital-ID model. With ASEAN moving toward cross-border digital identity, MyDigital ID could become your key to seamless travel and services across the region by 2029.

Handled well, with privacy safeguards keeping pace, MyDigital ID is shaping up to be one of the most quietly transformative upgrades to everyday Malaysian life this decade.