Webhook Secret

Noun · Security & Infosec

Definitions

  1. A shared secret used to verify that incoming webhook payloads actually come from the expected sender, typically via HMAC signature. Without it, anyone could POST fake events to your endpoint.

    In plain English: A shared password used to verify that incoming messages from another service are genuine and haven't been tampered with — like a secret handshake between two servers.

Related Terms