Guides
Back to QPilot.cloud

PayPal: 10002 Security Header Is Not Valid

Suggest Edits

What This Means

This indicates that your API credentials are not valid for the transaction.

Common Causes For This Error

  • Using sandbox API credentials for live transactions (or vice versa)
  • Using API credentials for an account that has not been correctly set up for Reference Transactions
  • Copying and pasting the incorrect API credentials — For example, the API signature can include a period (.), which means double-clicking it will only copy part of the signature.

Suggested Next Steps

  1. Confirm what API credentials you are using in QPilot > Site > Payment Integrations > PayPal.

  2. The API credentials you are using in QPilot should match the API credentials within your connected site's checkout for the PayPal Checkout integration as well.

    • Protip: Make sure you do not add any additional spaces or letters when copy/pasting values.

  3. Ensure that you are using your live PayPal account API keys (trying to process live payments with sandbox API Keys on your site will cause them to fail).

After Resolving The Issue

Once this issue is resolved, you should use the action to Restart Processing the Failed Scheduled Order.

Updated about 2 years ago