Kathmandu. The Office of the Prime Minister and Council of Ministers (OPMCM) has officially launched Prime Minister Sushila Karki’s verified social media presence, a move widely praised for boosting digital governance and transparency. However, the accompanying press release has sparked immediate controversy among cybersecurity and IT experts, focusing on the continued use of a public Gmail address for the nation’s highest executive office.
The OPMCM, in a statement signed by Joint Secretary and Spokesperson Rabilal Sharma, confirmed the official accounts are:
X (Twitter): @pmsushilakarki
Facebook: PM Sushila Karki (Email Reference: pmonepalnew@gmail.com)
Instagram: pm.sushila.karki (Email Reference: pmonepalnew@gmail.com)
Cybersecurity Experts Flag Critical Flaw: The Gmail Risk
While the digital outreach is a step forward, the reliance on a non-official email address (pmonepalnew@gmail.com) is being called a critical lapse in digital security and professional governance.
Cybersecurity specialists and digital governance analysts warn that using a free, third-party platform like Gmail for official contact exposes the Prime Minister’s Office and the government to significant risks, including:
Data Vulnerabilities: Sensitive government correspondence is placed outside of government-controlled infrastructure.
Impersonation and Phishing: The lack of an official domain makes the email highly susceptible to phishing and brand impersonation attacks.
Lack of Authenticity: It undermines the credibility and professionalism that an executive office must project.
Failure to Enforce Government Email Policy
The controversy highlights a widespread failure in policy enforcement. The Department of Information Technology (DoIT) has a clear Government Email Policy mandating that all high-level offices use official, domain-based email addresses (e.g., @opmcm.gov.np).
“The presence of a Gmail address in the Prime Minister’s official communication sets an extremely poor precedent for other government institutions,” stated a leading cybersecurity expert.
Conclusion: Cybersecurity Expert, along with Senior Vice President of Federation of Computer Association Nepal (CAN Federation) Chiranjibi Adhikari, said, “Transparency through social media is commendable, but credibility and cybersecurity depend on secure, official digital identities. The government must shift from using Gmail to official domain-based email addresses to reflect best practices in governance, accountability, and digital trust,” he requested adopting @opmcm.gov.np for credibility and security.
The Way Forward: Urgent Policy Compliance
The digital initiative is a positive step towards modern leadership, but experts urge the Government of Nepal and DoIT to immediately prioritize the enforcement of the existing email policy.
For a nation committed to digital governance, the use of a secure, government-controlled domain is not merely a technical preference, but a fundamental requirement for protecting state data and upholding digital trust with the public.























