Mobile Security Key and Biometric Authentication

HSBC HK
Ways to bank
Security key

Mobile Security Key
Activation
Tips for changing your device
Enable biometric authentication

Verify your identity after Mobile Security Key activation
Generate security code
Reset Mobile Security Key password

From late March 2022 onwards, there will be enhancements to the way you log on to HSBC Online and Mobile Banking by batches. Please consider activating Mobile Security Key on the HSBC HK App and ensure your contact details are up to date.

If you're prompted to set up a 6-digit Mobile Banking PIN when you log on to the HSBC HK App, it means our new log on enhancements are ready for you.

Learn more

Mobile Security Key

The Mobile Security Key is part of the HSBC HK Mobile Banking app (HSBC HK App) and replaces the physical security device. You can use it to log on to mobile and online banking, and authenticate transactions more easily and conveniently.

Key Features

Bank-grade security

The Mobile Security Key has advanced security features designed to protect you and give you peace of mind
Faster access

Log on more quickly with your Mobile Security Key so you can get things done more speedily
Biometric authentication

Log on instantly and authenticate online transactions with Touch ID/Face ID on Apple mobile devices or fingerprint authentication on compatible Android™ mobile devices¹
A simpler digital banking experience

Use your Mobile Security Key to enable push notifications² on the HSBC HK App. That way, you'll be notified when

- you've been paid via Faster Payment System (FPS)

- your new eStatements are ready

- you've paid your credit card

- your credit card bill is coming up

You can also use your Mobile Security Key to enable 'Chat with us', so you can get in touch with us about your banking enquiries, without the wait. It's as easy as texting a friend

Make payments via FPS more quickly just by scanning a QR code once you've activated your Mobile Security Key and registered for FPS

Haven't tried the HSBC HK App yet? Download today

HSBC apps and QR code icon; image used for HSBC Hong Kong mobile account opening and download HSBC Mobile Banking App.

App Store This link will open in a new window Google Play This link will open in a new window Baidu's app store Download from Baidu's app store This link will open in a new window

Activation - Quick Guide

Take a Tour

activate your Mobile Security Key with dual-password setup step1

Step 1: Search "HSBC HK App" in app stores to download the HSBC HK Mobile Banking app.

activate your Mobile Security Key with dual-password setup step2

Step 2: Input 'username'.

activate your Mobile Security Key with dual-password setup step3

Step 3: Input 'memorable answer' (It is the same input when you logon to Online Banking)

activate your Mobile Security Key with dual-password setup step4

Step 4: Input 'password' (It is the same input when you logon to Online Banking)

activate your Mobile Security Key with dual-password setup step5a

Step 5a: If you are logging on to the app on a new device for the first time, please select 'Activate Mobile Security Key', and proceed to Step 8 directly.

activate your Mobile Security Key with dual-password setup step5b

Step 5b: If you have logged on to the app before on this device, please tap on the Profile icon.

activate your Mobile Security Key with dual-password setup step6

Step 6: Select 'Security' under ‘Settings and preferences’.

activate your Mobile Security Key with dual-password setup step7

Step 7: Tap 'Activate Mobile Security Key' and we'll email you an activation code.

activate your Mobile Security Key with dual-password setup step8

Step 8: Enter the activation code and we'll send you an SMS with your verification code. (If you have issues receiving your activation code, tap 'Other verification options' for alternative delivery methods.)

activate your Mobile Security Key with dual-password setup step9

Step 9: Enter the verification code.

activate your Mobile Security Key with dual-password setup step10

Step 10: Follow the instructions to create your Mobile Security Key password.

activate your Mobile Security Key with dual-password setup step11

Step 11: You'll get an on-screen confirmation that you've successfully activated your Mobile Security Key. We'll also send you a confirmation via SMS and email (if applicable).

Take a Tour

activate your Mobile Security Key with physical device step1

Step 1: Search "HSBC HK App" in app stores to download the HSBC HK Mobile Banking app.

activate your Mobile Security Key with physical device step2

Step 2: Input 'username'.

activate your Mobile Security Key with physical device step3

Step 3: Input 'memorable answer' (It is the same input when you logon to Online Banking)

activate your Mobile Security Key with physical device step4

Step 4: Input 'password' (It is the same input when you logon to Online Banking); or tap on 'Continue with Security Device' to enter a security code generated from your Security Device .

activate your Mobile Security Key with physical device step5a

Step 5a: If you are logging on to the app on a new device for the first time, please select 'Activate Mobile Security Key', and proceed to Step 8 directly.

activate your Mobile Security Key with physical device step5b

Step 5b: If you have logged on to the app before on this device, please tap on the Profile icon.

activate your Mobile Security Key with physical device step6

Step 6: Select 'Security' under ‘Settings and preferences’.

activate your Mobile Security Key with physical device step7

Step 7: Tap 'Activate Mobile Security Key'.

activate your Mobile Security Key with physical device step8

Step 8: Enter the security code generated from your physical Security Device. (Note: this step is not required if you entered your physical Security Device's security code to log on.)

activate your Mobile Security Key with physical device step9

Step 9: Enter the verification code that we sent to you via SMS. (If you have issues receiving your verification code, tap on 'Other verification options' for alternative delivery methods.)

activate your Mobile Security Key with physical device step10

Step 10: Follow the instructions to create your Mobile Security Key password.

activate your Mobile Security Key with physical device step11

Step 11: You'll get an on-screen confirmation that you've successfully activated your Mobile Security Key. We'll also send you a confirmation via SMS and email (if applicable).

Tips for changing your device

Things to know before changing device

It is recommended that you have your old device with you when changing devices.
To log on to the app on your new device, you'll need to know your online banking username, 'memorable answer' and 'password'. (Note: Your Mobile Security Key password on the old device is NOT required)
If you've forgotten your 'memorable answer' or 'password', you can reset it by logging on to online banking and answering your pre-set security questions.
1. Select 'Log on' on the HSBC website, then 'Personal Internet Banking'.
2. Enter your username and select 'Continue'.
3. Select 'Forgot your memorable answer?' or 'Forgot your password?' to reset it.
If you've forgotten both "memorable answer" and "password", please contact us via hotline for assistance.
The Mobile Security Key on your old device will be automatically deactivated, and the associated Mobile Security Key password will no longer be valid once you've successfully activated your Mobile Security Key on your new device.

Quick Guide

Take a Tour

switch your Mobile Security Key to a new phone with old device step1

Step 1: Search "HSBC HK App" in app stores to download the HSBC HK Mobile Banking app.

switch your Mobile Security Key to a new phone with old device step2

Step 2: Input 'username'.

switch your Mobile Security Key to a new phone with old device step3

Step 3: Input 'memorable answer' (It is the same input when you logon to Online Banking, and your Mobile Security Key password on the old device is NOT required)

switch your Mobile Security Key to a new phone with old device step4

Step 4: Input 'password' (It is the same input when you logon to Online Banking, and your Mobile Security Key password on the old device is NOT required); or tap on 'Continue with Security Device' to enter a security code generated from your Mobile Security Key on your old device.

switch your Mobile Security Key to a new phone with old device step5a

Step 5a: If you are logging on to the app on a new device for the first time, please select 'Switch to this device', and proceed to Step 8 directly.

switch your Mobile Security Key to a new phone with old device step5b

Step 5b: If you have logged on to the app before on this device, please tap on the Profile icon.

switch your Mobile Security Key to a new phone with old device step6

Step 6: Select 'Security' under ‘Settings and preferences’.

switch your Mobile Security Key to a new phone with old device step7

Step 7: Tap 'Switch to this device'.

switch your Mobile Security Key to a new phone with old device step8

Step 8: Enter the security code generated from your old device (using 'Generate Security Code'). (Note: this step is not required if you logged on with a security code generated from your old device).

switch your Mobile Security Key to a new phone with old device step9

Step 9: Enter the verification code that we sent to you via SMS. (If you have issues receiving your verification code, tap on 'Other verification options' for alternative delivery methods.)

switch your Mobile Security Key to a new phone with old device step10

Step 10: Follow the instructions to create your Mobile Security Key password.

switch your Mobile Security Key to a new phone with old device step11

Step 11: You'll get an on-screen confirmation that you've successfully switched your Mobile Security Key to your new device. We'll also send you a confirmation via SMS and email (if applicable).

Take a Tour

switch your Mobile Security Key to a new phone without old device step1

Step 1: Search "HSBC HK App" in app stores to download the HSBC HK Mobile Banking app.

switch your Mobile Security Key to a new phone without old device step2

Step 2: Input 'username'.

switch your Mobile Security Key to a new phone without old device step3

Step 3: Input 'memorable answer' (It is the same input when you logon to Online Banking, and your Mobile Security Key password on the old device is NOT required)

switch your Mobile Security Key to a new phone without old device step4

Step 4: Input 'password' (It is the same input when you logon to Online Banking, and your Mobile Security Key password on the old device is NOT required)

switch your Mobile Security Key to a new phone without old device step5a

Step 5a: If you are logging on to the app on a new device for the first time, please select 'Switch to this device', and proceed to Step 8 directly.

switch your Mobile Security Key to a new phone without old device step5b

Step 5b: If you have logged on to the app before on this device, please tap on the Profile icon.

switch your Mobile Security Key to a new phone without old device step6

Step 6: Select 'Security' under ‘Settings and preferences’.

switch your Mobile Security Key to a new phone without old device step7

Step 7: Tap 'Switch to this device'.

switch your Mobile Security Key to a new phone without old device step8

Step 8: Select 'I don't have my other device' to deactivate the Mobile Security Key on your other device. Tap "Send me the code" and we'll email you an activation code.

switch your Mobile Security Key to a new phone without old device step9

Step 9: Enter the activation code from email and we‘ll send you a verification code via SMS. (If you have issues receiving your activation code, tap on 'Other verification options' for alternative delivery methods.)

switch your Mobile Security Key to a new phone without old device step10

Step 10: Enter the verification code from SMS.

switch your Mobile Security Key to a new phone without old device step11

Step 11: Follow the instructions to create your Mobile Security Key password.

switch your Mobile Security Key to a new phone without old device step12

Step 12: You'll get an on-screen confirmation that you've successfully switched your Mobile Security Key to your new device. We'll also send you a confirmation via SMS and email (if applicable).

Enable biometric authentication

Enjoy a smoother, all-round mobile banking experience. With just a smile, you can authenticate your identity and access mobile banking in seconds using iOS Face ID*. You can also log on and confirm transactions with just a touch in the HSBC HK App using iOS Touch ID or Fingerprint ID on compatible Android^TM devices¹.

Activate the Mobile Security Key and enable biometric authentication today to make your mobile and online banking experience that much easier. To learn more about the associated risks of using biometric authentication, please refer to FAQs listed below on this page.

*Available on compatible devices only.

Quick Guide

Step 1: Log on to the HSBC HK App and tap the profile icon. Under 'Settings and Preferences', select 'Security'. Select ‘Mobile log on' under the biometrics section. (Note: you may also need to grant permission for enabling biometric authentication on your device.)

Note: you must activate your Mobile Security Key before you can enable biometric authentication.

Step 2: Follow the instructions to verify with your biometrics.

Step 3: You'll see an on-screen confirmation letting you know you've successfully enabled Face ID / Touch ID / Fingerprint ID. We'll also send you a confirmation via SMS and email (if available).

Verify your identity after Mobile Security Key activation

We have further strengthened our security measures to protect customers. After activating your Mobile Security Key, you may need to further verify your identity before you can enjoy full access to HSBC Online and Mobile Banking services. This does not apply to new customers^# who activated Mobile Security Key on the same day they opened their account.

You may verify your identity using any of these methods:

1. Via the HSBC HK App

You'll be prompted to verify your identity^* using a one-time password (OTP) via SMS after you log on. This is only available at least 24 hours after you activate Mobile Security Key.

Alternatively, you can also follow these steps:

Step 1: Tap the profile icon on the top right corner.

Step 2: Under 'Settings and preferences', select 'Security' > 'Verify identity'.

Step 3: Follow the instructions to complete the verification.

2. Via an ATM

Use the 'Verify identity after Mobile Security Key activation' function at any HSBC/Hang Seng ATM in Hong Kong.

Step 1: Select 'Other services'

Step 2: Select 'Verify identity after Mobile Security Key activation'

Step 3. Select 'Confirm'

Step 4. You will receive an on-screen confirmation that you have successfully verified your identity

3. Via our enquiry hotline

Please call us for assistance.

HSBC Jade customers: (852) 2233 3033

HSBC Premier customers: (852) 2233 3322

Other customers: (852) 2233 3000

^#New customer refers to customers who do not hold any HSBC accounts including but not limited to integrated accounts or credit card accounts in the past 7 years.

*This feature on the HSBC HK App will only be available with the latest version on or after 13 Jan 2022.

These services will be affected:

Transfers to non-registered third-party accounts
Bill payments to certain merchants
Adding new payees
Adding new payees for HSBC Global Transfers
Changing transfer limits including small value and non-registered account transfer limits
Viewing your credit or debit card CVV
Changing personal information
Mobile Cash Withdrawal

Generate security code - Quick Guide

Step 1: Open the HSBC HK App (but don't log on). Select 'Generate security code' from the bottom of the screen.

Step 2: Select the option that you'd like to perform on HSBC Online Banking:

Log on
Re-authenticate
Transaction verification

Step 3: Enter your Mobile Security Key password and tap 'Generate code' or use biometric authentication (if you've enabled it for mobile transaction signing and generating security codes).

Step 4: Your security code will be displayed. Enter it where requested on HSBC Online Banking.

Reset Mobile Security Key password - Quick Guide

Step 1: Open the HSBC HK App. On the log on page, select ‘Forgotten Mobile Security Key password?’.

Step 2: Answer the security questions. (Note: this is different from ’Memorable Questions’.)

Step 3: Select ‘Send me the code’ and we'll send you a reset code by SMS (Note: If you do not receive our SMS, you may select 'Other verification options' for alternative delivery methods.)

Step 4: Enter the reset code.

Step 5: Follow the instructions to create your new Mobile Security Key password.

Please note, your new Mobile Security Key password must:

Contain 6-9 characters
Not contain more than two equal and consecutive characters
Not contain sequential letters
Not contain more than half of the same characters
Not contain credentials used elsewhere (e.g. username and password, date of birth or memorable answer)

Step 6: You'll see on-screen confirmation once you're successful. We'll also send you confirmation via SMS and email (if applicable) as well.

Frequently Asked Questions

Once your Mobile Security Key has been activated, your physical Security Device will be deactivated immediately. You can return this to any of our branches or dispose it yourself.

You can also use Mobile Security Key to log on to Personal Internet Banking. Simply follow the below steps to generate the security code. There are also on-screen instructions available on the Personal Internet Banking log on page for you to follow.

Launch the HSBC HK Mobile Banking app on your mobile device with Mobile Security Key activated
Select "Generate Security Code" from the bottom of the app screen
Select "Log on"
Enter your Mobile Security Key password and tap "Generate code". You can also use Face ID on Apple iPhone X or newer models, iOS Touch ID and Android™ Fingerprint ID if you have it enabled
Your security code will be displayed, please input in the relevant field in the Personal Internet Banking log on page

Since your device is jailbroken / rooted, your device may be less secure and may lead to fraudulent transactions. For security reasons and to protect your interest, you will not be allowed to use our app. In order to continue using our mobile banking services, please remove the Mobile Security Key from the jailbroken / rooted device, then you may reactivate Mobile Security Key on another non-jailbroken / rooted device. In the meantime, if you have dual password, you may logon with a non-jailbroken / rooted device or Personal Internet Banking to enjoy selected services, or use other channels to manage your banking needs.

Yes. Face ID is currently available only on the Apple iPhone X, iPhone XS, iPhone XS Max and iPhone XR. You can enable Face ID to log on and confirm transactions if you have the latest HSBC HK Mobile banking app installed with Mobile Security Key activated on the device. To activate Mobile Security Key on your new phone, please refer to the step-by-step guide above.

Please note that customers may need to grant permission before enabling Face ID if the Face ID pop-up message is shown.

The probability of a false match when using Face ID may be different under some circumstances, e.g. twins or siblings that look like you, or if you are in adolescence and disable "Require Attention for Face ID" function from your device settings.

Please refer to our FAQ page if you have any questions before enabling the Face ID function. Always enable "Require Attention for Face ID" or use your Mobile Security Key password if you have any security concerns.

Got further questions? You can find out more about the app and the Mobile Security Key on our FAQ page.

Note:

The screen displays and the images of the website are for reference and illustration purposes only.
Apple, the Apple logo, iPhone, iPad, iPod touch, Touch ID and Face ID are trademarks of Apple Inc., registered in the US and other countries/regions. App Store is a service mark of Apple Inc.
Google Play and the Google Play logo are trademarks of Google LLC. Android is a trademark of Google LLC.
HSBC adopts the latest internet security measure with the adoption of EV SSL Certificate (Extended Validation SSL Certificate). With this verification certificate in place, you can instantly know you're on a genuine HSBC website. We suggest customer to check the digital certificate with a desktop computer.
iPhone, iPad and iPod Touch with iOS/iPadOS version 13.0 or above (excluding Beta version)
Android™ devices with Android™ OS version 8.0 or above (excluding Beta version)

¹Fingerprint authentication is available on compatible Android™ devices running Android™ OS version 8.0 or later.

²You should ensure that your mobile phone and other telecommunications equipment and related services are capable of receiving Push Notification Alerts through push notifications. Push notification runs on the service provided by Apple Inc. ("Apple") or Google LLC ("Google"), as applicable. Any delay or failure in delivering push notification messages due to Apple's or Google's service or network connectivity is beyond our control.

HSBC Digital Banking has never been so simple

Mobile Security Key

Key Features

Bank-grade security

Faster access

Biometric authentication

A simpler digital banking experience

Haven't tried the HSBC HK App yet? Download today

Activation - Quick Guide

How to activate your Mobile Security Key if you only have memorable answer and password setup

How to activate your Mobile Security Key if you currently have a physical Security Device

Tips for changing your device

Things to know before changing device

Quick Guide

How to switch your Mobile Security Key to a new phone (when you still have your old device)

How to switch your Mobile Security Key to a new phone (when you don't have your old device)

Enable biometric authentication

Quick Guide

How to enable biometric authentication on compatible devices (Face ID/ Touch ID for Apple devices and *Fingerprint ID for Android™ devices)

Verify your identity after Mobile Security Key activation

What happens if I do not verify my identity after activating Mobile Security Key?

Generate security code - Quick Guide

How to 'Generate Security Code'

Reset Mobile Security Key password - Quick Guide

How to reset your Mobile Security Key password

Frequently Asked Questions

What about my existing physical Security Device?

How do I use Mobile Security Key to log on to Personal Internet Banking?

I have activated Mobile Security Key on a jailbroken / rooted device earlier, but I could no longer access the mobile app anymore, what should I do?

Can I use Face ID to log on and confirm transactions in the HSBC HK Mobile Banking app?

What do I need to know before enabling Face ID for HSBC HK Mobile Banking app?