Skip to main content
Your workspace uses one webhook secret to authenticate every incoming webhook it receives. The same secret covers all of your workspace’s webhook ingestion URLs, so it lives at the workspace level, not on an individual webhook.
Open Settings from the Dock (the app bar at the bottom of the screen). Then select Webhook Secret under Workspace Settings.This page is available to admins. The card appears after your workspace has a webhook secret.

​
Use the secret

Send the secret as a Bearer token in the Authorization header on requests to any of your workspace’s webhook ingestion URLs. For example, Authorization: Bearer <your-secret>. Default rejects requests without the correct secret.

​
View and copy the secret

Default hides the secret and shows it as dots.
1

Reveal it

Select the eye icon next to the secret to reveal it.
2

Copy it

Select the copy icon to copy the secret to your clipboard. Paste it into the configuration of the system that sends your webhooks.

​
Rotate the secret

Rotating replaces the current secret with a new one. Use it if the secret may have been exposed.
Rotating re-keys every webhook in your workspace. The current secret stops working immediately.Update every system that sends webhooks to Default with the new secret. Default rejects requests that still use the old secret.
1

Select Rotate

Select Rotate. Default asks you to confirm with “Rotate webhook secret?”
2

Confirm

Select Rotate secret to confirm, or Cancel to back out. Default generates the new secret and confirms with “Webhook secret rotated.”
3

Update your senders

Copy the new secret. Update every system that sends webhooks to your workspace so their requests keep authenticating.