I exposed my Merchant ID on my website, is this a problem?

[henry2468]

I unsuccesfully recently tried to find the code for a view cart button within my paypal account. In the end copied the html code from a search result page outside of being logged into pay pal.

The button didn't work until I added my unique merchant ID into the html code.

Some time later I saw that I could create a view cart button within paypal, but only after creating a new button.

I did so, it works and shows an absolutely huge encrypted merchant ID.

Which made me think, placing my unique merchant ID in the original view cart button was not secure.

Have I created a big security risk for myself?

[snowshoe]

The intent of the Merchant account ID is to replace your Account email address when you are using "non-hosted" or "non-encrypted" item button code.  It's not a security issue.  Years ago, before the online button creator was released, the only way to create item button code was manually.  The code was in plain text and the only way to connect the code to your PayPal Account was thu the use of your account email address. This left your email address exposed for spambots.  Not really a huge issue but, did put your address out there for anyone to see.  When the online button creator was released, it included a new feature to replace the use of your email address, the Merchant account ID.  Many people like to code their item buttons manually as this allows much more flexibility over the onllne button creator. For example, folks who like to use scripts use non-hosted code. You can't do that with hosted or encrypted code.  Today you just insert the ID as the value for the "business" variable and PayPal knows who to associate the code with. 

[henry2468]

My email address is on my website.

It was not in the button that listed my unique merchant ID but it on the contact page of my website.

[snowshoe]

Sorry, did we change the subject?

What exactly do you need help with?