Skip to main content

How to rotate a webhook signing secret

Short answer: On the endpoint choose Rotate secret. Keep the previous secret signing for 24 hours (recommended) so your receiver can switch without missing events, or stop the previous secret now if it may have been seen by someone else. The new secret is shown once.

Verified for PVology 0.61.0 · updated 2026-10-11

When to use this

On a schedule (at least yearly), or when a secret may have leaked.

Sign in to read the full help article

This is a free preview. Creating a PVology account is free.

Need more help? Contact PVology