Skip to main content

Is Shell validating weak PIN formats?

No, Shell does not validate the PIN number. However, we recommend considering excluding the following PIN formats when implementing ePIN:

The PIN length should be a minimum of 4 digits.
The PIN format should consist of positive numbers (0-9).
The PIN should not contain many duplicate values (e.g., 1222, 0000).
The PIN should not be predictable numbers (e.g., 4433, 1133, 1212, 6969).
The PIN should not be a sequence of numbers (e.g., 1234, 6789).
The PIN should not follow a keypad predictable pattern (e.g., 1379, 2580, 0852).
The PIN should not be based on birth year or birth date (e.g., 1988).
The PIN should not be commonly used PIN numbers (e.g., 1004, 2001).
When you use a Shell code library to encrypt the PIN, it contains the validation rules, and you will receive an error if the PIN does not meet these criteria.

About us

The Shell Developer Portal supports partners in onboarding to Shell APIs and turning ideas into production-ready solutions.

 

Shell logo

Contact

Login to your account

Ask AI Assistant about Shell APIs and API Products