Rotate my Webhook Secret

KORE signs every event it sends with the current Active secret key, which there is only ever one of. Rotating a secret allows you to invalidate your old one and have KORE use a new one to sign. You may want to do this because you lost your old secret or your old secret was compromised.

If you wish to rotate your secret, you can create a new secret and mark it as Active.

First, navigate to the Webhook dashboard and click Create to create a new secret.

This will create a secret with Pending status.

The first secret you create will be created in an Active state.

Any new secret created afterwards will bePending, which you can mark as Active when ready.

Any additional secrets created will overwrite the previous Pending secret, if one exists.

To rotate the current Active secret, click on the Activate button. This will disable the current Active secret and mark the Pending secret as Active.

Rotating a secret cannot be undone.

When rotating, ensure you are prepared to receive the new Active secret in your implementation. Otherwise, all validations will begin to fail, as KORE will no longer be using old secrets.

Last updated