HSBC Hong Kong eStatement Password Format (2026)

9-character preset password: last digit of your birth month + last 2 digits of your birth year, then the first 3 characters of your HKID or passport, then the last 3 digits of your mobile number.

As of October 2026, HSBC Hong Kong protects emailed eStatements with a 9-character preset password unless you have set your own: the last digit of your birth month and the last 2 digits of your birth year, then the first 3 characters of your HKID or passport number, then the last 3 digits of your mobile number. For example, Chan Ka Yan (made-up), born 9 March 1992, HKID Y987654(3), mobile 6123 4567, would type 392Y98567.

The password format

HSBC's Online Banking FAQ says that if you haven't set up your own password, your files are protected with a pre-set password made of three parts:

1. Part 1: the last digit of your month of birth, then the last 2 digits of your year of birth (3 characters)
2. Part 2: the first 3 alphanumeric characters of your Hong Kong Identity Card (HKID) or passport number
3. Part 3: the last 3 digits of the mobile number HSBC has on record

HSBC's own example: born 17/12/1985, HKID A123456(7), mobile 98785432. December is month 12, so the last digit is 2, and the year gives 85. The HKID gives A12 and the mobile gives 432. HSBC writes the result as 285 A12 432. The spaces are only there to make it easier to read. The password itself is 9 characters: 285A12432.

Only the last digit of the month is used. January (01) and November (11) both give 1, and October (10) gives 0.

HSBC also says it will ask you to change this password the first time you log on to view eStatements or eAdvices. If you have already set your own eStatement password, use that one instead.

Worked example

Chan Ka Yan (made-up):

• Born 9 March 1992: month 03 gives 3, and the year gives 92, so Part 1 is 392
• HKID Y987654(3): the first 3 characters are Y98
• Mobile 6123 4567: the last 3 digits are 567

Password: 392Y98567.

If the password doesn't work

• Have you set your own password? Once you change it under "Change Password" in the eStatement and eAdvice section, the preset no longer applies.
• Use the month's last digit only. Typing 12 for December or 03 for March is a common mistake.
• Use the HKID letter. Count the letter at the start of your HKID as one of the 3 characters. Type it in capitals, as HSBC's example does.
• Old mobile number. Part 3 uses the mobile number in HSBC's records. If you changed your number recently, try the old one.
• Older files after a change. HSBC's business eStatement FAQ says the latest password opens documents issued in the last 24 months, and that eStatements and eAdvices share one password. HSBC's personal FAQ doesn't say whether the same applies to personal accounts.
• Skip the password. You can view and download eStatements in HSBC Internet Banking or the HSBC HK App. Check the notification email for the bank's instructions too.

Removing the password so you don't have to type it again

Once the statement opens, you can keep an unlocked copy so you are not typing the password every month. On iPhone, iPad or Mac, UnKey does this offline: you enter the password you already know, and it saves a copy without the password on your device. Nothing is uploaded. You can also do the same with Preview on a Mac or the "print to PDF" option in most PDF readers. Store the unlocked copy somewhere private, because anyone who gets hold of it can read it.

Questions

Sources

• HSBC Hong Kong – Online Banking help FAQ (eStatement pre-set password)
• HSBC Hong Kong Commercial Banking – eStatement and eAdvice FAQ

Formats can change. If a password doesn't work, check the email the document came with or contact the issuer. UnKey isn't affiliated with any bank, employer or authority named here.