# Decrypt the Payload
source: https://developer.mastercard.com/mastercard-checkout-solutions/tutorial/integrate_apis_mvct/step4/index.md

## Step 4. Decrypt the Payload {#step-4-decrypt-the-payload}

Decrypt the `encryptedPayload` using your private key from the Payload Encryption public / private key pair. Mastercard uses the public key of this key-pair to encrypt response payloads containing payment card credentials.

See [Key Management](https://developer.mastercard.com/mastercard-checkout-solutions/tutorial/key-management/index.md) to understand more about which keys to use to decrypt the payload.

The payload will be returned in the most secure format possible and in accordance with the `dynamicData.dynamicDataType` parameter passed as `DYNAMIC_CARD_SECURITY_CODE` in the [Checkout](https://developer.mastercard.com/mastercard-checkout-solutions/documentation/api-reference/apis/index.md#checkout) API.

|      dynamicDataType       |                                               Description                                               |                                                                                                                                                                                 Payload format                                                                                                                                                                                 |
|----------------------------|---------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| DYNAMIC_CARD_SECURITY_CODE | Payment authorization using token \& DTVC passed in **token** and **dynamicData** objects respectively. | **DTVC** : Dynamic Token Verification Code (DTVC) is a one-time dynamic verification code. The code is 3-digits in length. Integrators should pass this value in the CVC2 field during payment authorization. This field is received in the [Checkout](https://developer.mastercard.com/mastercard-checkout-solutions/documentation/api-reference/apis/index.md#checkout) API. |