---
title: "Rotate webhook signing secret"
method: POST
path: "/webhooks/{webhookId}/rotate-secret"
tags: ["webhooks"]
---

# Rotate webhook signing secret

`POST /webhooks/{webhookId}/rotate-secret`

## Request

- Base URL: `https://docs-api.formify.eu/v1`
- URL: `https://docs-api.formify.eu/v1/webhooks/{webhookId}/rotate-secret`
- Auth: OAuth 2 (authorization code, authorization URL `https://docs-api.formify.eu/v1/oauth/authorize`, token URL `https://docs-api.formify.eu/v1/oauth/token`)

Generates a new signing secret for the specified webhook. The old secret is immediately invalidated. Make sure to update your verification logic with the new secret.

## Path parameters

- `webhookId` string, uuid, required

## Query parameters

- `errorLanguage` 'en' | 'sv' | 'es'

## Response `200`

Secret rotated successfully.

- object
  - `webhookId` string, uuid: The unique identifier of the webhook.
  - `signingSecret` string: The new signing secret.

## Other responses

- `401`: Unauthorized - Missing or invalid access token.
- `403`: Forbidden — webhook belongs to another account.
- `404`: Webhook not found or disabled.
- `500`: Internal server error.

---

[API](https://skmtc.dev/formify/apis/formify-api.md) · [All operations](https://skmtc.dev/formify/apis/formify-api/llms.txt) · [OpenAPI document](https://skmtc.dev/formify/apis/formify-api/revisions/571c4c0d4f4f?raw)