u/-anonymous-5

Hey everyone!

I'm building a pilot MERN stack banking application as a learning/portfolio project. It's not a real production app, but I'm trying to make it as realistic as possible.

I need to encrypt some sensitive fields like:

- Account number

- Mobile number

- Card number

- CVV (I know it shouldn't be stored in real apps — but this is a pilot)

What I already have:

- Passwords hashed with bcrypt ✅

- PIN hashed with bcrypt ✅

The challenge I'm facing:

I need to search by IBAN and mobile number in my transfer logic, so non-deterministic encryption won't work for me.

Is this approach reasonable for a pilot project? Any simpler alternatives I might be missing?

Thanks in advance!