Select Settings in the sidebar, then Webhook Secret under Workspace Settings.Only admins can open this page. It appears in the Settings panel once your workspace has a
webhook secret, which Default creates with your first incoming webhook.
Who can see and rotate the secret
Because members can reveal the secret from a workflow, treat it as shared with everyone who
builds workflows in your workspace.
Use the secret
Send the secret as a Bearer token in theAuthorization header on requests to any of your
workspace’s webhook ingestion URLs. For example, Authorization: Bearer <your-secret>.
Default rejects requests without the correct secret.
View and copy the secret
Default hides the secret and shows it as dots. The steps are the same on the settings page and in the Bearer secret field of an Incoming Webhook trigger.1
Reveal it
Select the eye icon next to the secret to reveal it.
2
Copy it
Select the copy icon to copy the secret to your clipboard. Paste it into the
configuration of the system that sends your webhooks.
Rotate the secret
Rotating replaces the current secret with a new one. Use it if the secret may have been exposed. Only admins can rotate the secret. The Incoming Webhook trigger links to this page with Rotate this secret in workspace settings.1
Select Rotate
Select Rotate. Default asks you to confirm with “Rotate webhook secret?”
2
Confirm
Select Rotate secret to confirm, or Cancel to back out. Default generates the new
secret and confirms with “Webhook secret rotated.”
3
Update your senders
Copy the new secret. Update every system that sends webhooks to your workspace so their
requests keep authenticating.