← Security+ glossary

Tokenization

Replacing sensitive data with a random substitute token, while the actual value is kept in a separate secure database (a token vault). Unlike encryption, a token is not mathematically derived from the original so it cannot be decrypted with a key; the original value is obtained only by looking it up in the vault.

All Security+ guides →