MALAYSIA will soon roll out redesigned MyKad identity cards and passports by the middle of this year, featuring enhanced security measures aimed at preventing forgery and digital breaches.
While cybersecurity experts have welcomed the planned upgrades, they emphasise that robust oversight, enforced transition procedures and greater user control are essential to ensure the new documents are truly secure.
Home Minister Datuk Seri Saifuddin Nasution Ismail announced on January 8 that the updated MyKad and passports would incorporate advanced security features to curb misuse and improve digital protection.
Aaron Ikram Mokhtar, a cybersecurity specialist and founder of Digital Ihsan, praised the move but highlighted persistent gaps in the current MyKad system.
These include the absence of a "kill switch" for lost or replaced cards and inconsistent verification processes across banks, telecommunications providers and other service points.
"Every MyKad generation must have a maximum lifespan, for example, eight to 10 years, and a forced migration plan," he told the New Straits Times. He added that older cards must be deactivated to prevent exploitation during the transition.
Aaron Ikram also stressed the importance of empowering citizens to actively monitor their own identity security.
"Citizens must be able to instantly suspend their MyKad via a secure portal and view a log of verification events, such as who checked my ID and when. This turns users into active security monitors, not passive victims.
“The chip should support selective disclosure to prove you are over 18 without revealing your birthdate or prove citizenship without showing your full address. This limits data leakage and reduces the value of breaches."
Fong Choong Fok, founder and executive chairman of cybersecurity firm LGMS, underlined the need for proper training for officers handling the new documents. "Even the most high-tech card can be misused if the systems checking it aren't strong. Training and monitoring at enforcement points are essential during the transition period," he said.
Saifuddin reassured the public that existing MyKad and passports would remain valid until their expiry, and that there was no need for citizens to rush to replace their current documents.- January 11, 2026
