Question 1

What is a Webhook Secret?

Accepted Answer

A webhook secret is a shared secret used to sign webhook payloads. It ensures that incoming webhooks are genuinely from the expected sender.

Question 2

How is a webhook secret used?

Accepted Answer

The sender signs the webhook payload with the secret, and the receiver verifies the signature. This prevents tampering and forgery.

Question 3

How long should a webhook secret be?

Accepted Answer

A webhook secret should be at least 32 bytes of random data. The whsec_ prefix identifies it as a webhook signing secret.

Webhook Secret Generator

Live Example