Why do websites require lengthy and complex passwords but credit cards only need a 4-number PIN?

Question

Why do websites require lengthy and complex passwords but credit cards only need a 4-number PIN?

In: Technology

Answer 1

Payment system writer here. I agree with most of these comments but would like to add that passwords are generally hashed and PINs are encrypted with 3DES or DUKPT keys that are different for every store location and change often.