Managing Webhook Secrets
View, copy, and rotate your webhook signing secret.
Viewing your webhook secret
In the dashboard Account section:
- Find the Webhook Secret field
- Click Reveal — the secret is fetched from the API on demand
- Click Copy to copy to clipboard
Your secret looks like whsec_a1b2c3d4... (64 hex characters after the prefix).
Rotating your secret
- Click Regenerate next to your webhook secret
- Confirm the action
- Your new secret is displayed
Warning
The old secret is immediately revoked. Update your webhook handler's secret before regenerating to avoid signature verification failures during the transition.
When to rotate
- If you suspect the secret has been compromised
- After team member changes
- As part of regular security hygiene
Using your secret
Your webhook secret is used to verify webhook signatures in your handler code. Every webhook from CueAPI includes a signature computed with this secret.