In Webhooks, choose Rotate signing secret for the intended endpoint and read the credential confirmation. Save the replacement secret when it is shown once.
Update your receiver’s secure configuration before expecting signatures from the rotated endpoint to verify. The previous secret should not be treated as a permanent fallback after rotation.
Run endpoint verification again to resume delivery. Check the endpoint state and latest delivery result in developer settings. Retry failed deliveries is available only when the endpoint is active, so resolve verification before using that control.
Rotation does not rewrite existing resource records or make a missed notification equivalent to a missing import outcome. Poll the relevant resource while delivery is being restored and deduplicate any later replayed events. If you need help, share the endpoint ID and safe error details rather than the old or replacement secret. Disable endpoint is the separate action when delivery should stop altogether.
Was this article helpful?
Tell us whether this answered the question you came with.