Market Insight

Mobile credentials are finally becoming mainstream, but they won't replace their physical counterparts

September 09, 2019

Bryan Montany Bryan Montany Research Analyst II
This product is included in:

Want to learn more?
Have an expert contact you.


  • The global market for mobile credentials experienced nearly 150% growth between 2017 and 2018. Over four million new mobile credentials were downloaded in 2018. Mobile credentials are the fastest growing product type in access control systems.
  • Over the next five years, mobile credential downloads will grow at over a 100 percent compound annual growth rate (CAGR) worldwide. Over 120 million mobile credentials are projected to be downloaded by end-users in 2023, which will represent nearly fifteen percent of all new credentials entering the market that year. 
  • Nearly 60% of all mobile credentials downloaded worldwide in 2018 are utilized to enter facilities in North America. However, the Asia Pacific region will surpass North America in annual download rates for mobile credentials by 2023.
  • In spite of this dynamic growth, mobile credentials will not replace the continued use of physical cards to enter a majority of facilities worldwide in the next decade.

The market for mobile credentials will experience explosive growth...

Over the past decade, access control vendors have promoted the introduction of mobile credentials as a revolutionary technology that will accelerate the adoption rates of cutting-edge equipment in facilities worldwide. Mobile credentials consist of virtual data that are downloaded onto smartphones, and they can be utilized as alternatives to traditional physical credentials such as ID cards and badges. This credential data can then be delivered by the user’s smartphone to a mobile-capable reader through Near-Field Communication (NFC), Bluetooth, Wi-Fi, or cellular transmissions.

The use of mobile credentials offers numerous compelling benefits for both facility owners and occupants. The ubiquity of smartphones ensures that the use of mobile credentials can be readily facilitated. Furthermore, building entrants frequently lose or misplace their physical credentials, which building owners must then replace. 

Access control systems have been among the last to embrace the capabilities of mobile technologies. Security professionals have generally been more cautious to embrace new trends, as any unforeseen complications introduced by new products could threaten to introduce critical security vulnerabilities.

However, there are signs that the market for mobile credentials has finally gained traction. In 2018, growth rates for worldwide annual downloads of mobile credentials surpassed 150%, and the market size grew to nearly 4.1 million downloads. By 2023, mobile credentials will grow from 1% of all credentials issued annually to 14% and will be introduced as a prominent alternative to physical credentials across the globe. IHS Markit projects that annual downloads of mobile credentials will reach over 9.8 million in 2019, over 20 million in 2020 and over 120 million by 2023.

Through 2023, the private commercial sector (including hotels and office buildings) will continue to dominate the market for mobile credentials with over a 90% share of the total market size. Universities and other educational facilities will represent over half the remainder of the market, and penetration rates will remain relatively low in other vertical markets. A more notable transition will occur regionally, as the Asia Pacific region will supplant North America as the largest regional market for mobile credentials by 2023. China and India will spark this shift with their massive populations and rapidly growing economies. The Chinese market for mobile credentials alone will constitute nearly 75% of the Asia Pacific region’s total annual downloads of mobile credentials by the year 2023. Meanwhile, India is one of the few remaining global markets where smartphone sales are expected to experience robust growth, with the market size expected to nearly double to over 800 million users by 2022.

This anticipated market shift has led many vendors to redirect their focus to introduce new hardware and software products that are compatible with mobile credentials. Global unit shipments of mobile-capable readers, such as iCLASS Seos and MIFARE DESFire readers, increased nearly 20% between 2017 and 2018. Manufacturers are also offering inexpensive Bluetooth modules that can be installed to add mobile technology compatibility to older models of access control readers.

…But they will not replace physical credentials in most access control systems

Mobile credentials were the fastest growing access control product in 2018, but their emergence into mainstream use will not threaten the existing market for physical credentials. Most commercial building owners have viewed mobile credentials as a supplemental technology that can provide occupants alternatives to carrying a physical badge, but few facility owners have expressed a willingness to transition away from physical credentials entirely. Only a minority of facilities in the hospitality and education sectors have begun to experiment with access control systems that require the use of mobile credentials.

Cybersecurity and privacy concerns have limited the widescale adoption opportunities for mobile credentials. A vast majority of organizations do not provide building occupants with approved smartphone devices, and entrants are expected to download mobile credentialing applications onto their own personal devices. The use of an entrant’s personal smartphone introduces a cybersecurity risk to the building owner, as unapproved third-party devices could introduce viruses to an organization’s IT infrastructure. An even greater concern is that a hacker or another malignant actor (such as a disgruntled employee) could exploit network vulnerabilities through their own unsecured and unmonitored devices.

Meanwhile, building tenants have expressed concerns that organizations may utilize mobile credential applications to track behavior and collect personal data stored on their smartphones. Many occupants have preferred to retain their physical credentials to avoid possible exposure of personal information, in spite of assurances from mobile credentialing application providers that this information would be protected.

Many access control vendors have addressed these concerns by encouraging hybridized mobile and physical credential use through bundled packages where physical and mobile credentials are offered together. Other vendors, such as Allegion, have offered mobile credentials for free but have charged for software and cloud services associated with creating and issuing the credentials. In 2018, an increasing percentage of mobile access vendors have also experimented with license fee and subscription business models for selling mobile credentials. The monetization of mobile credentials is another potential market barrier for vendors as most building owners have been unwilling to pay extra to provide entrants with the option to forgo a badge and enter with their phones.

Access Control Intelligence Service - 2019

This annually updated service examines the global market for access control equipment with base year totals and five-year forecasts for over 40 equipment types across 15 industries and 35 sub-regions. The main database report for the service analyzes the significant trends, threats and opportunities for growth affecting the access control market through 2023. Granular analysis is provided for market conditions impacting the sales of readers, control panels, credentials, electronic locks and access control software.  The Access Control Intelligence Service also includes two market briefs during the year on key industry topics, as well as two sub-regional deep dives into specific country markets.

Research by Market
Security Technology
Share facebook Twitter Google Plus Linked In Add This Contact Us