Security Features
Have peace of mind knowing that your account is kept safe through the use of world class security measures.
Learn how
Security features
Fingerprint / Face ID login

Login using your fingerprint / face ID.

One-Time PIN

Ensure the safety of your transactions with our One-Time PIN (OTP) verification.

Mobile Key

Verify your transactions by entering your Mobile Key PIN, fingerprint, or face ID.

Login Notification Email

Be notified every time you log in.

Transaction Confirmation Email

Receive an email for every successful transaction made from your account.

ATM Withdrawal Alert

Get an SMS alert whenever a certain amount is withdrawn from your accounts.

Lock Your BPI Online Access

Permanently lock your BPI Online access to prevent fraudulent transactions.

Quick guides

How to register a device through sending of secured SMS

Reminder: Please make sure that your BPI Mobile app is updated with the latest version.

For first-time device linking:

1. Login to the BPI Mobile app and tap “Register this Device”.
2. Select “Secured SMS” and tap “Let’s Proceed”.
3. Tap “Continue”.
4. To verify your device, BPI will send a secured SMS for you that contains your encrypted device registration details.


For Android users:

Your device will automatically send the secured SMS* to BPI.


For iOS users:

You will be required to send this SMS* within 1 minute to +639178910000 (for Globe/TM users), +639188910000 (for Smart/Sun/ TNT users).

For clients residing outside the Philippines, you are required to send back the SMS to BPI within 1 minute.

*Standard SMS rates will apply.

5. Once the device is successfully registered, you may start doing your financial transactions on the BPI Mobile app.

How to register a secondary device through Mobile Key

Mobile Key must be enabled in your primary device.

On your secondary device:

1. Log in to BPI Mobile on your secondary device.
2. Select Register This Device.
3. Select Mobile Key.

Note: Upon selecting Mobile key option, a prompt message will be displayed, informing clients that they will be notified via SMS and email once they can start using the app in 24hrs.

4. Select Continue.


On your primary device:

5. Click on the Push Notification that will be prompted on your primary device, then enter your PIN or biometrics to unlock your Mobile Key.
6. Click Approve to complete the device registration.
7. You’re done!

Note: You will receive an SMS and email notification confirming successful request for device registration via Mobile key. Once activated in 24 hours, you will receive an SMS and email notification confirming successful registration of your secondary device.

How to nominate a new mobile device as your primary device

1. Login to the BPI Mobile app.
2. Go to Menu and select "Mobile Key".
3. Turn on “Mobile Key”.
4. Nominate a 6-digit PIN Code.
5. Enter the One-Time PIN that you will receive.
6. You're done!

Note: Once enabled, you’ll be given the option to use your fingerprint or face ID for Mobile Key.

How to update your registered mobile number

1. Login to BPI Online or the Mobile app and go to “Account Maintenance”.
2. Click on “Update Mobile Number”.
3. Enter your Debit EMV card number and new mobile number. You'll need a BPI Debit Mastercard to complete this feature.

Note: You need to activate your request by going to any BPI ATM within 5 banking days.


For clients who have no access to an ATM or have not yet claimed their BPI Debit Mastercard:

1. Visit any branch near you. Find a branch and view its contact details with Google Maps. Simply type “BPI <branch name>” and click “Search”.
2. Call our 24-Hour BPI Contact Center at (+632) 889-10000 or any of our toll-free numbers*.

*After verifying your request via (+632) 889-10000, you will be asked to submit an original signed form.

How to activate biometrics login

1. Login to the BPI Mobile app.
2. Go to Menuand select "Biometrics Login".
3. Toggle on to activate biometrics during login.
4. You're done!

Note: All fingerprints or Face ID that are registered in your smartphone can be used to login to your account.

How to set ATM Withdrawal Alerts

1. Login to BPI Online and go to “Account Maintenance”.
2. Go to “Withdrawal Alerts” and select “Edit”.
3. Set the ATM withdrawal amount threshold to your preferred amount.
4. Select how you want to receive your ATM Withdrawal Alerts.
5. Input your One-Time PIN (OTP).
6. You're done!

How to set email login notifications

1. Login to BPI Online and go to “Account Maintenance”.
2. Enable your Login Email Notifications.
3. You're done!

How to turn on notifications

1. Login to the BPI Mobile app and go to “Account Maintenance”.
2. Select “Notifications”.
3. You may choose to enable “Push Notifications," "Mobile Key Notifications," and “Transaction Alerts and Offers”. ​​​​​​​
4. You're done!

How to lock my BPI Online access

1. Go to BPI Online or the BPI Mobile app and click “Lock My Access".
2. Enter your username.
3. Choose whether to enter your:

a. Debit Card Number
b. Credit Card Number
c. Deposit Account Number

4. Answer the Captcha.
5. Click “Lock My Access”.
6. You're done!

Note: By doing this, you will no longer be able to login to BPI Online and the BPI Mobile app to transact or reset your password. In case you wish to re-enroll and access your accounts via BPI Online, you must first request for deactivation of your locked username via our 24-hour BPI Contact Center at (+632) 889-10000 or through the branch before re-enrolling a new BPI Online account.

Manage your BPI Online account’s security
Not yet registered on BPI Online?
Register with your Deposit or Credit Card Accounts.
Get started
Already have an existing BPI Online account?
Log in to BPI Online today.
Log in
Download the BPI Mobile Banking app


Cybersecurity
Know how we keep you safe and how you can protect yourself.
Learn more
Frequently asked questions

Is device registration via Mobile Key real-time?

No. You will initially receive an SMS and email notification confirming successful request for device registration via Mobile key. An SMS and email notification will be sent within 24 hours once you can start using the app. Alternatively, you may register your device through sending of secured SMS which activates your account real-time.

Will I be notified once I can log in to my newly registered device?

Yes. You will be notified via SMS and email.

What will happen if I try to log-in immediately after registering via Mobile Key?

You will encounter an error if you attempt to log in immediately after registering.

Please wait for an SMS and email notification which confirms your device registration.

Which information may be used to lock my access to BPI Online?

Any Debit Card, Credit Card and Deposit Account number are accepted.

Can I receive my OTP in multiple registered devices?

Yes, but for your protection and security purposes, the One-Time PIN (OTP) will only be sent to your registered mobile number.

You can install the BPI Mobile app and register as many phones as you want to your account.

Am I allowed to use non-Philippine / international numbers for OTP?

Yes, you are allowed to use international numbers. Your mobile number should always be updated in our records to ensure that you receive the One-Time PIN (OTP) whenever you transact online.

Can other people use the BPI Mobile app on my phone to check their accounts?

​​​​​​​As part of the protection and security features provided by bank, you can only access your account through your registered devices.

What if I forgot my username?

1. Go to the BPI Mobile app’s login page.
2. Click “Forgot Username”.
3. Select Product Type.
4. Enter any of the following:

a. Deposit account number;
b. Credit card customer number;
c. Debit card number; or
d. Loan account number

5. Enter your date of birth.
6. Solve the math question and click confirm.
7. Confirm via SMS. BPI will create a secured SMS to proceed with username retrieval.


For Android Users:

Your device will automatically send the secured SMS* to BPI.


For iOS users:

You are required to send the generated SMS* content within 1 minute to BPI. +639178910000 (for Globe/TM users) or +639188910000 (for Smart/Sun/TNT users).

*Standard SMS rates will apply

8. Click “Show” to see your username.

Note: Self-service username retrieval is only available via BPI Mobile app and can be accessed once a day.

Which information may be used to lock my access to BPI Online?

Any Debit Card, Credit Card and Deposit Account number are accepted.

Does the "Lock my Access" feature need OTP or Mobile Key authentication?

No. As long as you provide your username, card number, or account number, and answer the captcha, you may lock your BPI Online access.

Can I cash-in to partner merchants after using locking my access?

No. Cash-in transactions to partner merchants will not be allowed once you lock your BPI Online access.

Can I enroll in BPI Online using my previous username?

No. If you want to re-enroll, you must create a new username and use a new email address.

Will there be an email confirmation for locking my access?

Yes. The email confirmation for locking your BPI Online access will be sent to your registered email address.

Can I unlock my BPI Online access after locking my access?

No. You can no longer unlock your BPI Online access once it’s locked. You must request a deactivation of your username via our 24-hour BPI Contact Center at (+632) 889-10000 or through the branch so you can re-enroll to BPI Online using a new username.

Can I reset my password even if the account is locked?

No. You cannot reset your BPI Online account once it's locked. You must request a deactivation of your username via our 24-hour BPI Contact Center at (+632) 889-10000 or through the branch before re-enrolling with a different username to BPI Online.

Can I use my original username to sign up for BPI Online after I lock my access?

No. You will need to deactivate your original username and enroll a new one with a new email address.

Where can I request to deactivate my username?

You may do this via our 24-hour BPI Contact Center at (+632) 889-10000 or through the branch.

Can I still use my Debit card or Credit Card for in-store transactions after locking my access?

Yes. You may still use your cards to transact. The Lock My Access facility will only deactivate your BPI Online access.

Can I cash-in to partner merchants after using locking my access?

No. Cash-in transactions to partner merchants will not be allowed once you lock your BPI Online access.

Who can I contact for concerns about the Digital Security Features?

For inquiries and comments, send us a message or call our 24-hour BPI Contact Center at ‎(+632) 889-10000.

Similar features

Account Settings

Easily and securely personalize your account settings through the browser or mobile app.

Learn more

Transfer Money

Choose the way you transfer funds.

Learn more

Pay Bills

Pay your bills conveniently and securely to over 600 merchants.

Learn more