At Mwash Cyber, we are committed to advancing digital literacy, and our “Get to Know eCitizen” series has been met with enthusiastic participation. The impressive engagement numbers reflect a strong demand for digital education and highlight how crucial it is to understand and effectively use digital platforms. Over the past two weeks, we’ve delved into why you need an eCitizen account, how to create one, how to log in, and how to reset your password.

In our first article, we discussed the importance of having an eCitizen account for Kenyan adults. This platform allows you to request, pay for, and apply for a variety of government services, streamlining your interactions with various government departments.

Why Securing Your eCitizen Account Matters

Your eCitizen account is a central hub for your personal information. It holds:

• Personal Details: Your identity and contact information.
• Family Information: Details about your children.
• Property Records: Information about your motor vehicles, houses (including those applied for under affordable housing), documents, and land.
• Government Services: Access to over 16,000 government services.

Given the breadth of data stored in eCitizen, securing your account is paramount. Unauthorized access could lead to serious privacy breaches and misuse of your personal information.

Evolution of Security in eCitizen

Historically, eCitizen security was less stringent. Many Kenyans used their ID numbers as both their user ID and password, which was a significant security risk. Anyone with access to an ID could potentially log in and access sensitive information.

However, last year’s integration brought substantial improvements to eCitizen’s security framework, including:

• Stronger Password Requirements: Passwords must now include uppercase and lowercase letters, numbers, and special characters, making them more resistant to unauthorized access.
• A login Verification code : A login verification code is mandatory except for those who willingly turn verification via OTP or TOTP off.

Despite these advancements, it’s crucial to take additional steps to protect your eCitizen account. Here are the key security features and suggestions you can use:

Essential Security Features for Your eCitizen Account

1. Enable and Configure OTP (One-Time Password)

• What is OTP?: An OTP (One-Time Password) is a temporary code sent to your registered email or phone that adds an extra layer of security by requiring this code to log in or complete transactions.
• How to Set It Up: Ensure OTP is activated by logging into your eCitizen account and navigating to the security settings. Set up OTP to be sent to your email or phone number.

2. Turn On TOTP (Time-Based One-Time Password)

• What is TOTP?: TOTP is a time-based OTP that requires an authenticator app (like Google Authenticator or Authy). This method generates a new OTP every 30 seconds, providing a higher level of security as it is tied to the time-based token and the authenticator app.
• Why TOTP is Secure: This method is highly secure because even if someone obtains your password, they cannot access your account without the time-based OTP from your authenticator app.

3. Enable Web Authentication (WebAuthn)

• What is WebAuthn?: WebAuthn is a web standard for secure user authentication that supports various methods such as biometrics (fingerprints), security keys, or other hardware-based solutions.
• How It Enhances Security: WebAuthn offers a robust layer of security by requiring physical authentication methods, making it difficult for unauthorized users to access your account even if they have your password.

Setting Up Security Features on your eCitizen Account

To configure security features in eCitizen here are the steps:

1. Log In to eCitizen: Access your eCitizen dashboard.
2. Go to Account Management: Navigate to the “Account Management” section.
3. Set Up Security Options: Follow the prompts to enable OTP, TOTP, and WebAuthn.

As a personal example, I use TOTP for verification. This method requires an authenticator app, which stores and generates time-based OTPs. This approach is particularly secure because accessing my account necessitates having both my password and the authenticator app, providing a strong safeguard against unauthorized access.

Conclusion

Securing your eCitizen account is crucial given the sensitive and comprehensive data it holds. By enabling OTP, TOTP, and WebAuthn, you can significantly enhance your account’s security and protect your personal information.

We hope this guide helps you better understand and implement the necessary security measures for your eCitizen account. To stay informed and receive more valuable tips, subscribe to our notifications.

Next week, we will explore the benefits of having an eCitizen account, including employment opportunities and additional advantages available to you as a citizen. Don’t miss out on these insightful updates!