I have an application and the customer needs the app to store the user's credit card details.
Where should I store it?
You should store paper documents with credit card numbers locked in a safe place such as a safe when not in use and restrict access. Electronic storage of credit card numbers is also standard if, for example, you perform recurring or recurring transactions.
Yes, storing a credit card on your phone is safe. In fact, it's one of the most secure ways to pay.
Use a payment gateway that supports tokenization, and store the token instead of the actual card info. If you must store the card info, store it in a SharedPreferences
file, encrypted with a PIN that the user must enter for every transaction. Do not store the PIN anywhere; attempt to decrypt the card info as needed using the PIN supplied by the user.
The PCI standard expressly forbids storing the CVV in any manner, so all transactions will have to be run as card-not-present. (Another advantage of tokenization: you may be able to get card-present rates.)
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With