# Where appId and locationId are in Web Payments SDK

**URL:** <https://developer.squareup.com/forums/t/where-appid-and-locationid-are-in-web-payments-sdk/7243>\
**Category:** Questions\
**Tags:** web-payments-sdk\
**Created:** [October 7, 2022, 4:35pm UTC](https://developer.squareup.com/forums/t/where-appid-and-locationid-are-in-web-payments-sdk/7243 "2022-10-07T16:35:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![koutaku](https://avatars.discourse-cdn.com/v4/letter/k/bbce88/32.png) [@koutaku](https://developer.squareup.com/forums/u/koutaku)\
**Post date:** [October 7, 2022, 4:35pm UTC](https://developer.squareup.com/forums/t/where-appid-and-locationid-are-in-web-payments-sdk/7243/1 "2022-10-07T16:35:53Z")

</div>

Where are the correct locations for appId and locationId in the Web Payments SDK client library?  
Is it OK to embed them in html?

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [October 7, 2022, 6:16pm UTC](https://developer.squareup.com/forums/t/where-appid-and-locationid-are-in-web-payments-sdk/7243/2 "2022-10-07T18:16:33Z")

</div>

With our Quickstart you’ll configure the `locationId` and `applicationId` in the [html of the page](https://github.com/square/web-payments-quickstart/blob/ce70c71b78fd64f20726f0fe0445745400c6b1d3/public/examples/card.html#L10). It’s  
okay to expose those. It’s just the access token that should never be exposed. 🙂