# Card Tokenization

Xplor Pay tokenizes and secures your customers’ sensitive card data using a randomly generated code and stores the token in a secure vault. This token supports:

* [future purchases](https://docs.xplorpay.com/guides/payment-processing-solutions/card-tokenization/tokenize-card/create-multi-use-or-durable-card-tokens-token-id-or-id)
* [card-on-file payments](https://docs.xplorpay.com/guides/payment-processing-solutions/card-tokenization/tokenize-card/use-multi-use-or-durable-card-tokens) and
* [recurring transactions](https://docs.xplorpay.com/guides/payment-processing-solutions/recurring-payments)

Integrating with Xplor Pay tokenization removes [Payment Card Industry (PCI) DSS](https://docs.xplorpay.com/security-solutions/pci-compliance#what-is-pci-dss) scope from your software and reduces [Payment Card Industry (PCI) Compliances](https://docs.xplorpay.com/security-solutions/pci-compliance) scope for merchants.

## Types of tokens <a href="#types-of-tokens" id="types-of-tokens"></a>

Xplor Pay offers the following types of card tokens:

### Single-Use card token - Mobile JSON Web Token (`mobilejwt`) <a href="#single-use-card-token-mobile-json-web-token-mobilejwt" id="single-use-card-token-mobile-json-web-token-mobilejwt"></a>

Use a single-use token (`mobilejwt`) for one-time transactions. The token becomes invalid after the transaction is processed and can't be used for recurring transactions, refunds, or returns.

For details about using single-use card tokens (`mobilejwt`), see the [JavaScript SDK](https://docs.xplorpay.com/guides/payment-processing-solutions/javascript) documentation.

### Multi-Use or Durable card token (`token-id` or `id`) <a href="#multi-use-or-durable-card-token-token-id-or-id" id="multi-use-or-durable-card-token-token-id-or-id"></a>

Use a multi-use token (`token-id` or `id`) for multiple online or in-person transactions. This token supports card-on-file payments and membership renewals. Durable tokens enable repeated transactions, speed up the checkout process, and reduce cart abandonment.

### Reversible or Irreversible card token <a href="#reversible-or-irreversible-card-token" id="reversible-or-irreversible-card-token"></a>

Use a reversible token to retrieve customer information, such as the primary account number (PAN). You may need to submit the PAN to a third-party payment handler for fraud recovery. An irreversible token helps you avoid potential liability associated with storing customer information.