A method of fitting a hearing device , comprising: initiating a fitting session by initiating pairing between a first fitting station and the hearing device, each of the hearing device and the first fitting station having a wireless communication interface (20, 20-1) using a communication protocol; providing a long-term key (LTK) as a shared secret to the first fitting station and the hearing device, the LTK being suitable for establishing a secure connection between the first fitting station and the hearing device via the wireless communication interfaces; generating an identity resolving key (IRK) of the first fitting station, which is required for generating and resolving a device address of the first fitting station; providing the IRK of the first fitting station to the hearing device via a secure connection using the LTK between the wireless interfaces; providing an IRK of the hearing device, which is required for generating and resolving a device address of the hearing device, to the first fitting station via a secure connection using the LTK between the wireless interfaces; storing pairing data including the LTK, the IRK of the first fitting station and the IRK of the hearing device, together with an association between the first fitting station and the hearing device, in a database connected to the first fitting station; storing the LTK and the IRK of the first fitting station in the hearing device; conducting a fitting session via a secure connection between the first fitting station and the hearing device via the wireless communication interfaces; and disconnecting the first fitting station and the hearing device. initiating a fitting session by initiating pairing between a first fitting station and the hearing device, each of the hearing device and the first fitting station having a wireless communication interface (20, 20-1) using a communication protocol; providing a long-term key (LTK) as a shared secret to the first fitting station and the hearing device, the LTK being suitable for establishing a secure connection between the first fitting station and the hearing device via the wireless communication interfaces; generating an identity resolving key (IRK) of the first fitting station, which is required for generating and resolving a device address of the first fitting station; providing the IRK of the first fitting station to the hearing device via a secure connection using the LTK between the wireless interfaces; providing an IRK of the hearing device, which is required for generating and resolving a device address of the hearing device, to the first fitting station via a secure connection using the LTK between the wireless interfaces; storing pairing data including the LTK, the IRK of the first fitting station and the IRK of the hearing device, together with an association between the first fitting station and the hearing device, in a database connected to the first fitting station; storing the LTK and the IRK of the first fitting station in the hearing device; conducting a fitting session via a secure connection between the first fitting station and the hearing device via the wireless communication interfaces; and disconnecting the first fitting station and the hearing device. <EOS>