I could be missing something obvious here, but bcrypt, although mentioning the word "crypt" and using cryptography, is only a hashing algorithm. [1] I believe

I could be missing something obvious here, but bcrypt, although mentioning the word "crypt" and using cryptography, is only a hashing algorithm. [1] I believe the point of storing CC data would be to retrieve it (impossible, typically, by the nature of hashing) to enable the user to purchase goods using this information stored without having to fetch their CC details. 1. http://en.wikipedia.org/wiki/Bcrypt http://en.wikipedia.org/wiki/Bcrypt Edit: Ah. I seem to have correlated your note with the latter part of your sentence.