Enhance Webhook Security with Secrets | Blockchain API

We’re hyped to announce a new feature that puts you in control of your webhook security: Personal Secrets! This powerful addition allows you to ensure the authenticity and integrity of webhooks, giving you enhanced control over the security of your webhook notifications. Read the full documentation here

Why Personal Secrets?

Webhooks are essential for integrating applications, providing real-time notifications and updates. However, ensuring the authenticity of these notifications is crucial to prevent unauthorized access and data breaches. With the introduction of personal secrets, you can now securely sign your webhooks, allowing your server to verify that incoming requests are legitimate.

Key Benefits of Using Personal Secrets

1. Increased Security: Personal secrets enable the use of an X-Signature header for all outgoing webhook notifications. This means that every request sent to your server can be validated, ensuring that it truly originated from us.

2. User Control: You can now view, set, and regenerate your personal secret whenever necessary. If you need to change it for any reason, simply navigate to your profile settings.

3. Immediate Updates: Any changes made to your personal secret take immediate effect, ensuring that you have the latest security measures in place.

How to Manage Your Personal Secret

Managing your personal secret is straightforward. Here’s how to do it:

1. Log In to Your Profile: Access your profile settings on our platform.
2. Locate the Webhook Personal Secret Section: You’ll find a dedicated card for managing your webhook personal secret.
3. Set or Regenerate Your Secret:
   • If you haven’t set a secret yet, click the “Set Personal Secret” button to create one.
   • If you need to change your existing secret, simply click “Regenerate Secret.”
4. Update Your Webhook Handlers: After changing your personal secret, make sure your webhook handling code is updated accordingly to avoid any service interruptions.

Verifying the X-Signature Header

To ensure that your server can trust incoming webhook requests, you’ll need to verify the X-Signature header. We’ve provided detailed guides for verifying this signature in various programming languages, including Python, Java, PHP, and JavaScript. This way, you can implement the necessary checks seamlessly.

Getting Started

Ready to enhance your webhook security? Log in to your account now and navigate to your profile settings to manage your personal secret today! For technical documentation on how to use the X-Signature, visit this link.

If you have any questions or need assistance, our support team is here to help. We’re committed to keeping your integrations secure and efficient, and we believe this new feature will significantly enhance your experience.

Thank you for being a valued customer!

Stay secure,

Chaingateway.io Team