Stripe webhook signature verification checklist
A focused checklist for teams whose Stripe webhook endpoint receives events but rejects or skips fulfilment because signature verification fails.
Fulfilment checks
- Use the live webhook signing secret from the exact Dashboard endpoint, not a Stripe CLI forwarding secret.
- Verify the raw request body before parsing or re-encoding JSON.
- Read the Stripe-Signature header and require a current timestamp plus at least one v1 signature.
- Return a 2xx response only after the event is accepted for processing, and log the event ID plus failure reason without secrets.
Free helper
Paste the visible Stripe-Signature header shape and get server-side verification checks.
Paid pack
Get the private Stripe webhook starter pack for fulfilment, signatures, product mapping, and delivery logs.
Operational Stripe launch checklist only. Confirm live settings in your own Stripe Dashboard before accepting payments.