This wallet stays active and keeps receiving payments right up until any change you make below completes its security hold. Nothing is interrupted.

Edit a row to change a product. Use the × to remove one. Click Save products to apply your changes.

For a one time charge that is not one of your fixed products. Enter any amount and get a payment link to send. Nothing is saved as a product, it is a single invoice.

If you lost your API key or it was exposed, generate a new one here. This is the safe fix, we never store your key so it cannot be shown again, but a fresh one takes seconds. The old key stops working immediately.

You will sign with your wallet to confirm, then update your website with the new key. Your checkout keeps working once you paste the new key in.

You have several keys. This resets ALL of them to a single new key. If you only lost one, use Replace next to that key below instead, it leaves your other keys working.

Create separate keys for different sites or team members. Each can be revoked on its own without affecting the others. All keys send payments to your one registered wallet.

There is no BoreLine button to embed, you use your own. Here is a styled one ready to paste. It calls payWithBitcoin(), which you wire up in Step 2.

<button class="btc-pay-btn" onclick="payWithBitcoin()">
  ₿ Pay with Bitcoin
</button>

<style>
.btc-pay-btn {
  display: inline-flex; align-items: center; gap: 8px;
  background: #F0B429; color: #0a0a0a;
  font-family: inherit; font-size: 15px; font-weight: 600;
  border: none; border-radius: 8px; padding: 14px 28px;
  cursor: pointer; transition: transform .15s, box-shadow .15s;
  box-shadow: 0 4px 14px rgba(240,180,41,.25);
}
.btc-pay-btn:hover {
  transform: translateY(-2px);
  box-shadow: 0 6px 20px rgba(240,180,41,.4);
}
</style>

Your button calls your own server, your server holds the API key and calls BoreLine, then sends the customer to the returned payment page. Pass a saved product with tier, or a custom amount with amount_fiat.

// On your backend, e.g. /api/pay
const res = await fetch('https://api.borelinepay.uk/api/invoice', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-Key': process.env.BORELINE_PAY_KEY
  },
  body: JSON.stringify({
    email:  customer.email,
    tier:   'starter'          // a saved product key
    // or for a custom amount instead of tier:
    // amount_fiat: 49.99, note: 'Custom order'
  })
});
const { invoice_url } = await res.json();
// send the customer to the hosted payment page
return { redirect: invoice_url };

When the payment confirms on chain, we POST a signed event to your webhook URL (set it on the Settings page). Verify the signature, then run your own fulfilment. The X-BoreLine-Key header tells you which of your keys signed it — matters only if you run several active keys on Business or Enterprise.

app.post('/webhooks/payment', (req, res) => {
  const sig  = req.headers['x-boreline-sig'];
  const ts   = parseInt(req.headers['x-boreline-time']);
  const hint = req.headers['x-boreline-key'];  // prefix of the signing key
  if (Math.abs(Date.now() / 1000 - ts) > 300)
    return res.status(400).send('Replay');
  // One key on Starter/Pro; several on Business/Enterprise — pick the
  // one named by the hint, then sign with its SHA-256 hex.
  const key      = WEBHOOK_KEYS.find(k => k.startsWith(hint)) || YOUR_API_KEY;
  const keyHash  = sha256(key);
  const expected = hmac(keyHash, req.rawBody);
  if (!timingSafeEqual(sig, expected)) return res.status(401).end();
  if (req.body.event === 'payment.confirmed')
    grantAccess(req.body.email, req.body.tier);
  if (req.body.event === 'payment.late')
    handleLatePayment(req.body.email);  // paid after expiry
  if (req.body.event === 'payment.reversed')
    revokeAccess(req.body.email);
  res.status(200).end();
});

You are on the Starter plan.

Upgrading gives you a fresh month on the new plan starting today, at the new plan price. You keep your ZPUB, products, and API key.

You are in control of your data. Download everything BoreLine holds about your account at any time, or delete your account entirely. Your Bitcoin is never held by BoreLine, it stays in your own wallet, so nothing here can touch your funds.

This permanently deletes your account and all associated data: your invoices, API keys, settings, and history. It cannot be undone.

Your wallet and funds are not affected. BoreLine only ever held your watch only public key. To confirm this is really you, you will sign with your wallet, the same way you authorise key changes.