Check a webhook signature and see why it fails
Paste the secret and raw body. It computes the signature, shows the difference and tries common body changes.
- Runs on your device
- No sign-up
- Works offline after a visit
—result
—timestamp age
—body
How to test a webhook signature
- Choose the provider, then paste the secret and the raw body.
- Paste the headers, or the whole raw HTTP request, and read the verdict.
- If it fails, read the body spellings and hints, or make a request to send.
Questions
Why must the body be exact?
The signature covers the exact bytes received. Re-formatting JSON, changing line breaks or dropping a trailing newline changes it, so the tool shows which spelling matches.
Is my secret sent anywhere?
No. The signature is computed in your browser with the Web Crypto API. Only the provider and generic header settings are remembered; the secret and body are not.
Does the make mode send a request?
No. It prints a curl command with the signature in its headers. Run it yourself, and only against a server you own or are allowed to test.
Reviews
No reviews yet. Be the first.