# Rotate my Webhook Secret KORE signs every event it sends with the current `Active` secret key, which there is only ever one of. Rotating a secret allows you to invalidate your old one and have KORE use a new one to sign. You may want to do this because you lost your old secret or your old secret was compromised. If you wish to rotate your secret, you can create a new secret and mark it as `Active`. First, navigate to the **Webhook** dashboard and click **Create** to create a new secret.

This will create a secret with `Pending` status.

{% hint style="info" %} The first secret you create will be created in an `Active` state. Any new secret created afterwards will be`Pending`, which you can mark as `Active` when ready. Any additional secrets created will overwrite the previous `Pending` secret, if one exists. {% endhint %} To rotate the current `Active` secret, click on the **Activate** button. This will disable the current `Active` secret and mark the `Pending` secret as `Active`. {% hint style="danger" %} **Rotating a secret cannot be undone.** When rotating, ensure you are prepared to receive the new `Active` secret in your implementation. Otherwise, all validations will begin to fail, as KORE will no longer be using old secrets. {% endhint %}