A system and method for providing card verification values for card-not-present transactions is described. In one example, a user's computing device stores single-use CVVs to be provided from a secure wallet. The secure wallet may be software running on the user's computing device. Alternatively, it may be an external device connectable to the user's computing device, which accesses the external device to obtain the single-use CVV.