# How to Implement Encryption in Postman
source: https://developer.mastercard.com/blog/how-to-implement-encrytption-in-postman/index.md

Authors: Derek Humphreys. If an API is handling sensitive data (e.g. personally identifable information, credit card numbers etc.) then it will require that you encrypt the body of the request. Even if the API uses MTLS to protect the connection, it is still good practice to encrypt the payload so even after the MTLS connection is terminated the data in the body of the request is potected all the way to the service that will work on it. We provide an encryption helper library to help you do this in code. You can find the library here. But if you want to quickly test out an API through Postman, you can't use/import these helper libraries directly into Postman.