The PIN entry device shall be physically secured so that it is not feasible to modify its operation or extract PINs or encryption keys from it. The PIN entry device should be designed or installed so as to prevent other people from observing the PIN as it is entered. The keyboard layout should be standardized, with consistent and unambiguous labels for function keys, such as "enter", "clear" (this entry) and "cancel" (the transaction).