I've got the plug-in (the link to the Plug-in is still working and available on my Account Summary page under Tools). It doesn't work under Linux, though (not even under WINE Windows emulator for Linux, though Firefox for Windows does install fine).
I gave a copy of the secure card generator to a co-worker who previously didn't use the tool with his Paypal account...I just got his reply back. The Plug-in installs, but fails to complete teh last two steps of setup, using MS-IE (he's running Windows 7). Not conclusive, but it 'smells' like at least SOME Windows users aren't allowed to add the Plug-In and Secure Card feature at this time...
I found a manual Secured card generator option deeper in the menus under my account! (Note, I've used the Plugin for several months, and it is still active at this time as well).
1. Login to your account
2. Go to account Overview (Summary)
3. Right column, under "My Account Tools", click on "Paypal Plug-In"
4. Left column, under "Plug-In home", click on "Secured Cards"
5. Center screen, under "Secure Cards", the second tab is "Generate a new card"
The manual generator works. It's well hidden / nested under a few levels of menus, but, it works.
I just created and used a generated Secure Card successfully about 5 minutes ago.
I think I understand PART of the problem people are having with unexpected payments made via Secure Cards.
The expiration date of the Secure Card is not...today. That is, when the card is generated, it is given an expiration date perhaps a month or more later than...today, to ensure that the merchant's bank has time to process the charge back.
I'm not sure how they would prevent additional charges from being process, other than outright denying authorization, providing that the virtual account number / security code, and billing address are all correct, especially if the request for funds somes from the same vendor.
You see, many (not all) merchants will issue a pre-auth against a buyer's credit card just to see that the information provided is valid. For example, for MagicJack, they issue a pre-auth of $1, before billing the 'real' purchase amount of $10 for changing your phone number (e.g. to avoid sales calls). So, in fact there are two pre-auth's levied against the so-called one-time use account ($1, and, $10), though one is allowed to expire or cancelled (the $1), and only one is actually completed (the $10 transaction). If Paypal were not to allow for an 'extra' pre-auth, this practice of 'testing the waters' by many online merchants would fail, and the purchase wouldn't go through.
