Webhook Signature

What is Webhook Signature?

A webhook signature is a security measure used to verify that a webhook request was actually sent by the expected provider. It involves including a cryptographic hash in the request header that the recipient can validate using a shared secret.

Why It Matters

• It prevents attackers from sending fake webhook notifications to a client’s server.

• Signatures ensure the integrity of the data being sent, as any modification would invalidate the hash.

• They provide a reliable way for developers to authenticate incoming requests without exposing sensitive credentials.