At the core of our platform is a commitment to keeping your business and your customers safe. Today, we're introducing a major security upgrade to how card details are handled.
What's Changing
Historically, card details were returned in plain text through our API. While our channels are secure, transmitting sensitive data without encryption carries inherent risk.
We're eliminating that risk. Moving forward, card details will be instantly encrypted, and we'll send you a secure hash instead of plain text in the API response.
How This Protects You
By replacing card data with an encrypted hash, we neutralize its value in transit. Even if data is intercepted, it's completely unreadable without your unique decryption key. This dramatically reduces your compliance burden and secures customer financial data against network attacks.
What You Need to Do
To continue processing cards, your team needs to:
- Generate Your Key: Log into your Merchant Dashboard, go to Security, Merchant Hash Key,, and generate your unique Merchant Hash Key.
- Update Your Integration: Adjust your application to receive the new hashed response instead of plain text.
- Decrypt Locally: Use your Merchant Hash Key to decrypt the payload on your secure servers.
That's it.
Note: Any issues during integration or any enquires/complaints send a mail to support@payscribe.co