Skip to main content

Scramble URL

The Scramble URL option allows you to encrypt the checkout query string, adding an additional layer of security to dynamically generated checkout links. It prevents checkout parameters from being exposed in plain text and makes the query string more difficult for end users to read or modify.

To use this option, navigate to Store settings -> General settings -> Integration tab -> Scramble URL option. Define an encryption key and encryption vector that will be used to encrypt the checkout query string. The same key and vector must be used when generating the encrypted query string and when the checkout processes and decrypts it.

After configuring the encryption key and vector, encrypt the checkout query string according to the supported encryption method and append the resulting encrypted value to the checkout URL. The exact encryption and encoding requirements are demonstrated in the code samples. Click Download under Code samples to download examples for encrypting the checkout query string in supported programming languages. Use these examples as a reference when implementing URL encryption on your side.

note

Keep the encryption key and vector secure. Do not expose them in client-side code, publicly accessible repositories, or other locations where end users could retrieve them. If the encryption is performed on your server, the key and vector should be stored and handled exclusively on the server side.