Module 9 of 22 · Practitioner · 60 min
Tokenization process
The opposite of static magstripe data: a token is a different, independently valid card number, not an encrypted or seeded one, and how digital wallets implement it.
Enrollment required
Module 1 of this course is free to read. Buying the course opens every other module, the transaction lab and search across the course. The workbench and the APDU decoder stay free for anyone.
The course is tied to your account, so you sign in first and come straight back here.
One payment for this course. Access for as long as the course exists, with every update and new research module that follows, at no further cost.
No hardware is sold here, and none is needed to read the course.
Payments are final. Module 1 is free so you can judge the course before you pay. Terms
Already enrolled? Sign in
Open the free workbench →What this module covers
- 01Two things called tokenization
- 02A token is a card number
- 03The parties, and who sees which number
- 04Provisioning: how a token gets onto a device
- 05Domain restriction is where the security lives
- 06What the token adds on top
- 07Recognizing a token in a capture
- 08What tokenization does not fix