Skip to main content

Webhook signature verifier

Paste one delivery exactly as your endpoint received it. The verifier recomputes the Standard Webhooks signature the way Bex signs it and, if it does not match, tells you the most likely reason.

The check runs in your browser with WebCrypto: the secret and body are never sent anywhere, stored, or put in analytics.

These tools run entirely in your browser. Nothing you paste or drop is uploaded, stored, or sent to analytics.

Paste the exact bytes you received, before any JSON parsing. Bex signs webhook-id.webhook-timestamp.body.

Paste a delivery and choose Verify signature.