Abstract: According to embodiments of the present invention, method and system for log-in and authorization are disclosed. The system comprises a user device, a server and a mobile device. The user device issues a log-in request. The server receives the log-in request through communication with the user device via a first communication link, and outputs a digital token as one time passwords (OTPs) to the user device in response to the log-in request, for display thereon. The mobile device comprises a communication unit, a camera and a processor. The communication unit communicates with the server via a second communication link. The processor is configured to capture the digital token through the camera, transmit the captured digital token to the server for verification, authenticate a biometric characteristic, and output a notice indicating successful biometric authentication to the server to confirm authorization of the user device. Then, the user device can be used to proceed with an operation with a user account.