[rahimnathwani]

You don't need to display them to the user. The user can ask for them from the customer. The user types in the 4 digits the customer provides. The computer compares the two strings. The user need never see the real stored digits.

[Uchikoma]

Sorry, in my argument I meant user with what you've called customer.