A method for securely generating a PIN comprises generating a number of random binary bits; determining the least significant bits of the number of bits; converting the least significant bits to a decimal integer; shifting the value of the integer by a predetermined constant to produce a shifted integer; and encoding the shifted integer as bits in a PIN block in accordance with a standard. A method for managing security of a PIN used to provide access to a secure device comprising choosing the PIN; storing an encrypted version of the PIN in the device; and communicating the PIN to a user of the device via a communication channel separate and apart from a channel reset to provide the device to the user. A method for resetting a PIN in a secure device comprising sending a message to a data center having an original PIN for the device, the message including authorization data indicative of at least one of the device and an authorized user of the device, and securely communicating the original PIN to the location of the device.