Frequently Asked Question

Using strong cryptography to hash the password meets the intent of the PCI DSS Requirement 8.2.1, which is to prevent unintentional disclosure of the passwords during transmission over the network or during storage.

Please refer to the PCI DSS and PA-DSS Glossary of Terms, Abbreviations, and Acronyms for additional information on hashing.

(Note: PCI DSS Requirement numbers refer to PCI DSS version 3)