---
title: "Configure webhook secret"
method: POST
path: "/v1/account/settings/webhook/rotate-secret"
tags: ["Webhooks"]
---

# Configure webhook secret

`POST /v1/account/settings/webhook/rotate-secret`

This API configures the secret key for account-level webhook signature verification. Use this API to add a new secret or update an existing one. The secret is used to sign webhook payloads using HMAC SHA256, allowing you to verify that requests originate from Ocrolus.
> 🚧 We have a better version!
> This product is superseded by [Org Level Webhooks](https://docs.ocrolus.com/ocrolus-api/docs/organization-level-webhook), which we recommend for improved functionality and integration.

## Request body

- object
  - `secret_key` string, required — The new webhook secret key. Must be between 16 and 128 characters long.

## Response `200`

Success

- object — Schema for the successful response of new secret key.
  - `response` object
    - `status` string — Indicates the request status.
    - `message` string — Confirmation message.

## Other responses

- `404` — Webhook Not Found

---

[API](https://skmtc.net/ocrolus/apis/user-management.md) · [All operations](https://skmtc.net/ocrolus/apis/user-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ocrolus/user-management/versions/3571ef602d13/schema)