PIN Block

PCIComplianceHubLast updated

The encrypted block that carries a personal identification number between a PIN entry device and the system that verifies it. A PIN is never transmitted or stored in the clear: it is combined with account data, formatted into a block and encrypted, typically inside a hardware security module or a PTS-approved device. PIN blocks are Sensitive Authentication Data and must not be retained after authorization.