# Invalid Signature Incoming webhook

**URL:** <https://devforum.zoom.us/t/invalid-signature-incoming-webhook/114078>\
**Category:** API and Webhooks\
**Created:** [July 20, 2024, 8:43pm UTC](https://devforum.zoom.us/t/invalid-signature-incoming-webhook/114078 "2024-07-20T20:43:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sandjieva.alex](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/sandjieva.alex/32/61697_2.png) [@sandjieva.alex](https://devforum.zoom.us/u/sandjieva.alex)\
**Post date:** [July 20, 2024, 8:43pm UTC](https://devforum.zoom.us/t/invalid-signature-incoming-webhook/114078/1 "2024-07-20T20:43:41Z")

</div>

I generated signature in cmd as it was in example:  
echo -n “{format}&{timestamp}&{input message}” | openssl dgst -sha256 -hmac {secret} -binary | base64

I used timestamp=30000.  
Then I send this request:  
curl ‘…integrations.zoom.us/chat/webhooks/incomingwebhook/\<…\> format=message&timestamp={timestamp}’ -X POST -H ‘Authorization: {authorization}’ -H ‘Content-Type: application/json’ -d ‘Hello World’

I entered the generated signature into the authorization and received the error: Invalid Signature.  
Please, help, I need to send message only by secure connection, it’s my task at work. I’m working as an intern and I’m already on the verge of despair(

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [July 24, 2025, 12:20pm UTC](https://devforum.zoom.us/t/invalid-signature-incoming-webhook/114078/2 "2025-07-24T12:20:08Z")

</div>

Closed on July 24, 2025, 12:20pm UTC

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.