# `Stripe.Resources.Token`
[🔗](https://github.com/jeffhuen/tiger_stripe/blob/main/lib/stripe/resources/token.ex#L2)

Token

Tokenization is the process Stripe uses to collect sensitive card or bank
account details, or personally identifiable information (PII), directly from
your customers in a secure manner. A token representing this information is
returned to your server to use. Use our
[recommended payments integrations](https://docs.stripe.com/payments) to perform this process
on the client-side. This guarantees that no sensitive card data touches your server,
and allows your integration to operate in a PCI-compliant way.

If you can't use client-side tokenization, you can also create tokens using
the API with either your publishable or secret API key. If
your integration uses this method, you're responsible for any PCI compliance
that it might require, and you must keep your secret API key safe. Unlike with
client-side tokenization, your customer's information isn't sent directly to
Stripe, so we can't determine how it's handled or stored.

You can't store or use tokens more than once. To store card or bank account
information for later use, create [Customer](https://docs.stripe.com/api#customers)
objects or [External accounts](https://stripe.com/api#external_accounts).
[Radar](https://docs.stripe.com/radar), our integrated solution for automatic fraud protection,
performs best with integrations that use client-side tokenization.

# `t`

```elixir
@type t() :: %Stripe.Resources.Token{
  bank_account: Stripe.Resources.BankAccount.t() | nil,
  card: Stripe.Resources.Card.t() | nil,
  client_ip: String.t(),
  created: integer(),
  id: String.t(),
  livemode: boolean(),
  object: String.t(),
  type: String.t(),
  used: boolean()
}
```

* `bank_account` - Expandable.
* `card` - Expandable.
* `client_ip` - IP address of the client that generates the token. Max length: 5000. Nullable.
* `created` - Time at which the object was created. Measured in seconds since the Unix epoch. Format: Unix timestamp.
* `id` - Unique identifier for the object. Max length: 5000.
* `livemode` - If the object exists in live mode, the value is `true`. If the object exists in test mode, the value is `false`.
* `object` - String representing the object's type. Objects of the same type share the same value. Possible values: `token`.
* `type` - Type of the token: `account`, `bank_account`, `card`, or `pii`. Max length: 5000.
* `used` - Determines if you have already used this token (you can only use tokens once).

# `expandable_fields`

# `object_name`

---

*Consult [api-reference.md](api-reference.md) for complete listing*
