# Verify webhook signatures with one call

By Steven Van · 2026-07-08

The new verifyWebhookSignature() helper confirms that a webhook event really came from Notion, so you no longer need to hand-write the HMAC check.

Notion has added a verifyWebhookSignature() helper... Let me redo without code tags since only p, ul, li, h2, strong, em, a are allowed.

[Notion](<https://creatorstoolbox.com/tools/notion>)'s webhooks SDK now includes a verifyWebhookSignature() helper, so developers no longer need to hand-write the HMAC check for incoming events. It takes the raw request body, the X-Notion-Signature header, and the subscription's verification token, compares signatures in constant time, and returns false instead of throwing when the input is malformed.

It works without configuration in Node.js 18+, Bun, Deno, Cloudflare Workers, Vercel Edge Functions, and browsers. A companion signWebhookPayload() function generates signatures for testing a handler, detailed in the [changelog entry](<https://developers.notion.com/page/changelog#july-8-2026>).

[![](<https://notion-demo.mintlify.app/images/og-image.png>)](<https://developers.notion.com/page/changelog#july-8-2026>)

![Notion](<https://www.google.com/s2/favicons?domain=notion.so&sz=128>)

Notion

All-in-one workspace for notes, docs, projects, and wikis — with AI built in for writing, summarizing, and organizing.

[View Notion →](<https://creatorstoolbox.com/tools/notion>)

Sources

[Original source](<https://developers.notion.com/page/changelog#july-8-2026>)

[Read Verify webhook signatures with one call on Creators Toolbox](<https://creatorstoolbox.com/blog/notion-verify-webhook-signatures-with-one-call>)

---
Canonical source: https://creatorstoolbox.com/blog/notion-verify-webhook-signatures-with-one-call