Skip to main content

Rotate your webhook's signing secret

POST 

/webhook/secret/rotate

Replace your webhook's signing secret, without missing an event or failing a delivery.

The new secret is returned, once. For the next 24 hours each delivery is signed with both the new and the previous secret, so you can switch at your own pace; after that, only with the new one. Rotating again within those 24 hours stops the oldest secret being used straight away.

Responses​

The webhook, with its new signing secret