This disclosure provides a method, performed at a hearing device, for updating a hearing device configuration at the hearing device of a hearing system. The hearing system comprises the hearing device, a fitting device configured to be controlled by a dispenser and a server device. The method comprises receiving a configuration package and a configuration authentication package, the configuration authentication package comprising a dispenser certificate. The method comprises determining if an update criterion is fulfilled. The update criterion is based on verifying the configuration authentication package. The method comprises updating the hearing device configuration based on the configuration package if the update criterion is fulfilled.