Mobile Security Key and Biometric Authentication

Overview

Mobile Security Key[1] is a two-factor authentication method that can be activated via Hang Seng Mobile App, allowing you to log on quickly and bank safely.

If you are an existing Personal e-Banking user but using Hang Seng Mobile App for the first time, you have to first bind your own device by activating Mobile Security Key. Otherwise, please register Personal e-Banking first before activating Mobile Security Key.

After successful activation, simply enter your "6-digit PIN" to log on to Hang Seng Mobile App. You can also generate one-time security code with your "6-digit PIN" to log on Personal e-Banking (Desktop version).

Key features

If you are using the Hang Seng Mobile App, you need to first bind your own device by activating Mobile Security Key which involves identity verification. After verification, you will need to set-up a "6-digit PIN". You can bank safe because this "6-digit PIN" can only log on to Hang Seng Mobile App on this Mobile Security Key-binding device.

You can activate Mobile Security Key and bind with up to 1 device. If you need to change a new mobile device, please remove another existing Mobile Security Key-activated device(s) first.

After setting up a "6-digit PIN", you can also activate biometric authentication (i.e. fingerprint or face recognition). That way, log on is more secure because you can minimise the instances of you typing out the "6-digit PIN" and prevent others from obtaining your PIN.

You can open Hang Seng Mobile App, tap "Generate Security Code" under "Featured quick links" section, then generate one-time security code with "6-digit PIN" for logging on to Personal e-Banking via website, verifying transactions and re-authentication.

If you've activated Mobile Security Key to bind your own device, you'll be able to log on Hang Seng Invest Express mobile app directly with biometric authentication, or a "6-digit PIN" on the same device.

Hang Seng Personal Banking

Manage your wealth anytime with mobile banking

How it works

Activate Mobile Security Key

How to activate Mobile Security Key?

If you have already registered Personal e-Banking but using Hang Seng Mobile App for the first time, you have to first bind your own device by activating Mobile Security Key on Hang Seng Mobile App.

Step 1 / 7
Go to the log-on page of Hang Seng Mobile App, enter your username and date of birth (including year, month and day).
Step 1 / 3
Log on to Hang Seng Mobile App and tap "Activate Touch ID" - depending on the device model, it could be called "Activate Face ID" / "Activate biometrics".

Activating Mobile Security Key on a new device

To further protect your account, some services may be suspended when you activate your Mobile Security Key on a new device. To resume the services, you need to further verify your identity first:

  • Verify your identity at any Hang Seng and HSBC ATMs by choosing “Other Service” “Verify identity for full access to Personal e-banking services”
  • Call our hotline (852) 2822 0228 (Phone Banking PIN, or Voice ID required) 
  • After at least 24 hours, verify your identity under "Settings & Security" "Device & app settings" "Verify identity" in Hang Seng Mobile App

Verify identity after activating Mobile Security Key for 24 hours:

Step 1 / 5
Log on to Hang Seng Mobile App after activating the Mobile Security Key for at least 24 hours.

Generate security code

After activated Mobile Security Key, you can generate a one-time security code by tapping "Generate Security Code" in the "Featured quick links" section of Hang Seng Mobile App. Use this code for logging on to Personal e-Banking, verifying transactions, and re-authentication.

Make sure the date and time of your device are set to automatic to generate a valid one-time security code.

Step 1 / 4
Tap “Generate security code” on log-on page.

Make sure the date and time of your device is set automatically to generate a valid one-time security code.

If you have your old device:

Step 1 / 3
Log on to Hang Seng Mobile App and go to "Settings & Security" "Device & App Settings" "Manage Device".

If you don't have your old device / deleted Hang Seng Mobile App on your old device:

Step 1 / 3
Log on to Personal e-Banking (Desktop version), and go to "Settings" "Security-related" "Manage Device".

FAQs

Mobile Security Key - General Questions

Mobile Security Key is a digital version of Security Device within the Hang Seng Personal Banking mobile app and is used to generate one-time use Security Codes in order to log on to Personal e-Banking and access a full range of online banking services.

After you have downloaded the Hang Seng Mobile App on your mobile device, you can log on with your username and date of birth, then follow verification steps on-screen to activate Mobile Security Key and create a "6-digit PIN". After that you will be able to log on to Hang Seng Mobile App with the "6-digit PIN".

Please keep your personal information in our records up-to-date and valid (such as mobile number, email address and date of birth) in order to activate the Mobile Security Key.

You will not be able to log on to Hang Seng Mobile App without Mobile Security Key.

If you only use Personal e-Banking via our website, you can continue to log on with your username and password / physical Security Device after you "Trust this browser".

If you need to use Hang Seng Mobile App, you must activate Mobile Security Key. After activation, the physical Security Device (if any) will be automatically disabled, so you will need to log on to Hang Seng Mobile App with "6-digit PIN" or biometric authentication.

If you have forgotten your "6-digit PIN", you can choose "Forgot your 6-digit PIN?" on the log-on page via Hang Seng Mobile App, then enter security code / enter your password and one-time SMS verification code, and follow the on-screen instructions to reset your "6-digit PIN".

To better protect your account, after activating / switching your Mobile Security Key, services including raising small value daily transfer limit and non-registered payee daily transfer limit, transferring to new payee, adding new registered payee, authenticating card-not-present (CNP) transactions, updating mobile number and email address via Personal e-Banking or Hang Seng Mobile App may be suspended.

If you wish to resume the services, you have to first verify your identity by going to "Settings and Security" > "Device & app settings" in Hang Seng Mobile App for full access to Personal e-Banking services.

Mobile Security Key is supported on Apple iPhone with iOS version 14.0 or above and mobile device with Android OS version 8.0 or above.

You can activate Mobile Security Key with up to 1 device that belongs to you for more secure experience.

Mobile Security Key is a feature within Hang Seng Mobile App.

Once activated, you can log on to Hang Seng Mobile App quickly and easily by entering your "6-digit PIN" or using biometric authentication (if enabled). You can also generate a one-time security code for logging on to Personal e-Banking via website, verifying transactions and re-authentication.

There is no need to carry an additional physical Security Device with you. You can enjoy full access to our online banking services anytime and anywhere.

No, you can't. To maintain the security and integrity of your accounts, you can only activate either Mobile Security Key or physical Security Device.

If you've already owned a physical Security Device, once your Mobile Security Key is activated, your physical Security Device will be deactivated immediately.

Before discarding your mobile device, you will need to deactivate your Mobile Security Key. You can log on to Hang Seng Mobile App on that device and go to left menu, tap “Settings & Security”  "Device & app settings" "Manage device" under "Security".

Alternatively, you can log on to Personal e-Banking via our website, go to "Settings" "Security-related" "Manage Device", then choose the device you would like to remove and click "Delete". To better protect your account, we recommend that you also reset your old mobile device to factory settings after removing the device.

Please contact our Customer Service Representatives immediately at (852)2822 0228 if your Mobile Security Key activated mobile device is lost or stolen and we will disable the Mobile Security Key to prevent unauthorised access.

You need to remove the old device linked with Hang Seng Mobile App first to deactivate Mobile Security Key before setting up on new mobile device.

If you have the old device on hand, you can log on to Hang Seng Mobile App on that device and go to left menu, tap "Settings & Security" "Device & app settings" "Manage device" under "Security", and follow the on-screen instructions to remove the device.


Alternatively, you can log on to Personal e-Banking via our website, go to "Settings" "Security-related" "Manage Device", then click "Remove device" to remove the Mobile Security Key from that device.

Mobile Security Key is bound to your mobile device instead of your SIM card, so you don't need to activate Mobile Security Key again after you've changed the SIM card or your mobile number on your device linked with Hang Seng Mobile App.

To better protect your account, if you've changed your mobile number, please update the bank record by logging on to Hang Seng Mobile App and choose "Settings & Security"  "Account & personal particulars"  "Update personal particulars".

If your mobile device is jailbroken / rooted, there may be security loopholes. For security reasons, you will not be allowed to activate and / or use Mobile Security Key.

If you have successfully registered an overseas mobile phone number in our system, we will deliver the SMS verification code to your phone number. Please ensure you are technically able to receive the message in the country / territory you are in.

Yes, you can change your "6-digit PIN" by logging on to the Hang Seng Mobile App, then choose “Settings & Security” from left menu “Device & app settings” “Manage device", choose the device and and then choose "Change PIN"..

Mobile Security Key - Logon

Yes. Once you have activated the Mobile Security Key on your mobile device, you have to enter your "6-digit PIN" or use Biometric Authentication (if you have enabled it) when you log on to Hang Seng Mobile App, unless you have enabled biometric authentication as another log-on option.

After activating the Mobile Security Key, you can log on to Personal e-Banking via website by generating a one-time security code on Hang Seng Mobile App:

  • Open Hang Seng Mobile App on your Mobile Security Key-activated device
  • Tap "Generate security code" on log-on page
  • Select "Log on"
  • Enter your "6-digit PIN" or use biometric authentication (if enabled), then your one-time security code will be immediately displayed
  • Enter it on the log-on page of Personal e-Banking via our website 

Make sure the date and time of your device are set to automatic to generate a valid one-time security code.

You may also find related instructions on Personal e-Banking (Desktop version) log-on page.

Once your Mobile Security Key is activated, it will be linked to your personal accounts, and only you can access your accounts through the Mobile Security Key-activated mobile device. Other users cannot log on to their accounts in Hang Seng Mobile App using your Mobile Security Key-activated mobile device.

If you deleted your Hang Seng Mobile App accidentally, you'll need to activate Mobile Security Key again. After reinstalling the App to your mobile phone, then enter your username , follow verification steps on-screen to create a "6-digit PIN". After that you will be able to log on Hang Seng Mobile App with the "6-digit PIN".

Biometric Authentication

Biometric authentication means the identity authentication function using biometric credentials (e.g. fingerprint, facial map or any other biometric data).

Biometric authentication is a feature tied in with Mobile Security Key, allowing you to access mobile banking faster and easier by using your unique biometric credential(s), such as fingerprint, iris or facial map, stored on your mobile device(s) instead of having to enter your "6-digit PIN".

Since the Biometric Authentication is tied in with the Mobile Security Key, you must first activate Mobile Security Key in order to enable Biometric Authentication service.

Yes. As long as you have enabled biometric authentication for log on Hang Seng Mobile App, you can use biometric authentication for transaction verification and generating security code.

Face ID, Touch ID or Fingerprint Authentication are available on:

  • iPhone - iOS version 14.0 or later
  • Designated Android mobile device - Android OS version 8.0 or later with compatible fingerprint sensor and recognised Trusted Execution Environment (TEE) enabled

Any biometric credential(s) stored on your mobile device, now or in the future, can be used to log on to your Hang Seng Mobile App when you enable Biometric Authentication. Therefore, you should not store or allow any third-party biometric credential(s) to be stored in your mobile device. Only store your own biometric credential (s) on your mobile device.

Before logging on to Hang Seng Mobile App, you can enable biometric authentication by choosing "Log on" "Activate Face ID" or "Activate Touch ID", then enter "6-digit PIN" and follow the on-screen instructions.

After logging on, you can enable biometric authentication by choosing “Settings & Security” from left menu “Device & app settings” “Manage device”, and follow verification steps on-screen.

Yes. You can log on immediately using your biometric credentials after successful registration of Biometric Authentication.

No, your biometric credentials will not be stored in the Hang Seng Mobile App or kept for Hang Seng’s internal record.

Please contact our Customer Service Representatives immediately at (852)2822 0228 if your Biometric Authentication-enabled mobile device is lost or stolen and we will deactivate your Mobile Security Key and disable the Biometric Authentication service to prevent unauthorised access.

After logging on to Hang Seng Mobile App, you can disable biometric authentication by choosing “Settings & Security” from left menu “Device & app settings” “Manage device”, and follow verification steps on-screen.

To better protect your account, we may disable your biometric authentication when:

  • your biometric credential settings in your mobile device have been changed (e.g. added / deleted fingerprints, or reset facial map)
  • your Mobile Security Key has been deactivated

If you want to use biometric authentication to log on to Hang Seng Mobile App, you will need to log on and enable biometric authentication again by choosing “Settings & Security” from left menu “Device & app settings” “Manage device”.

The probability of a false match using face recognition for authentication varies in some cases, such as for twins or siblings who look alike or adolescents, and disable "Require Attention for Face ID" function from your mobile device settings. If you would still like to enable the face recognition authentication function, please read the Terms and Conditions carefully and accept the associated risks and consequences.

Only the biometric credentials, such as fingerprints or facial map, stored in your mobile device can be used to access the Hang Seng Personal Banking mobile app. Your biometric credential will not be stored in the Personal e-Banking or kept anywhere within Hang Seng. You can enable or disable Biometric Authentication anytime in the "Settings" menu. Please note that the probability of a false match using face recognition for authentication may be dependent on certain circumstances, e.g. twins or siblings that look alike, or if you’re an adolescent, and have disabled the "Require Attention for Face ID" function in your mobile device settings. If you would still like to enable the face recognition for authentication function, please read the Terms and Conditions carefully and accept the associated risks and consequences.

Generate Security Code

To verify online transactions, you need to enter "6-digit PIN" or use biometric authentication on Hang Seng Mobile App. It requires your device's accurate time to generate one-time security code for verification. If your device time is not set to automatic, an invalid one-time security code will be generated and transaction will be rejected.

Make sure the date and time of your device are set to automatic, so that a valid one-time security code can be generated for transaction verification.

Invalid one-time security code could be due to the below reasons, for example:

  • The date and time of the device have not been set automatically, please go to the settings function of the device to check and update the relevant settings
  • The username entered is incorrect
  • The 6-digit PIN entered is incorrect
  • One-time security code generated from Hang Seng Mobile App is valid, but you entered it wrongly
Featured offers

Useful Information

Footnote

Other point(s) to note

  1. Google Play and the Google Play logo are trademarks of Google LLC.
  2. Apple, the Apple logo, and iPhone are trademarks of Apple Inc., registered in the US and other countries. App Store is a service mark of Apple Inc.

Remark(s)

  1. For compatible mobile devices only.
    Mobile Security Key is available on Apple iPhone with iOS version 14.0 or above and mobile device with Android OS version 8.0 or above.
    Fingerprint Authentication is available on:
    • Apple iPhone 5s or later models with Touch ID and operates on iOS 14.0 or above
    • Android mobile device operates on OS version 8.0 or above with compatible fingerprint sensor and recognized Trusted Execution Environment (TEE) enabled, or
    • Designated Android mobile devices operates on OS version 8.0 or above with compatible fingerprint sensor enabled, including:
      Samsung: Galaxy S10, Galaxy S10+, Galaxy S10e, Galaxy A7, Galaxy A9, Galaxy Note 9, Galaxy S9, Galaxy S9+, Galaxy A6+, Galaxy A8 Star, Galaxy J6, Galaxy C9 Pro, Galaxy Note 8, Galaxy S8, Galaxy S8+, Galaxy S7, Galaxy S7 edge, Galaxy S6, Galaxy S6 edge, Galaxy S6 edge+, Galaxy Note 5
      LG: Q Stylus+, V30+, V20, G6, G6+
      Sony: Xperia XZ3, Xperia XA2 Plus, Xperia XZ2, Xperia XZ2 Premium
      Google: Pixel 3, Pixel 3 XL, Pixel 2, Pixel 2 XL
      HTC: U12+
      Huawei: Mate 20 Pro
      Motorola: G6 Plus
    • Face recognition for authentication is available on Apple iPhone X or newer models and operates on iOS 14.0 or above.