Sign payloads for a partner API

Partners that verify request origin expect an HMAC signature. Without one, the integration either fails verification or skips security entirely.

Hash and Encrypt generates the signature from a shared secret held in your dashboard, and the following webhook step sends it as a header.

1. 1Store the shared secret on the Secrets page.
2. 2Add Hash and Encrypt, choose HMAC-SHA256, and pass the request body as the value.
3. 3Send the signature as a header on a following Send Webhook step.
4. 4The receiver verifies the signature to confirm the request came from you.

• SHA family and MD5 digests
• HMAC-SHA256 with a secret key
• AES-256 encrypt and decrypt
• Base64 encode and decode