# Rotating a webhook's secret

You can rotate a webhook's secret in your [Digital River Dashboard](https://dashboard.digitalriver.com) if you think a webhook's secret is compromised. When you rotate the secret, the Digital River Dashboard blocks the old secret and generates a new one. When you rotate the secret, you can block the old secret immediately or allow it to expire after the specified expiration time. During that specified expiration time, both secrets work. It gives you time to transition from the old secret to the new one. In either case, you can use the new secret immediately.

To rotate a webhook's secret:

1. From the **Webhooks** page on the  [Digital River Dashboard](https://dashboard.digitalriver.com), click **More options** (vertical ellipses) associated with the key you want to rotate and click **Rotate**.

   <figure><img src="https://334437993-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LqH4RJfLVLuHPXuJyTZ%2Fuploads%2FINPyTkgbB503d7cxut0O%2F1%20Rotating%20a%20webhook%20-%20options%20drpdown.png?alt=media&#x26;token=c8f5fa37-3129-47b3-9c04-72192debf8d8" alt=""><figcaption></figcaption></figure>
2. Choose the expiration time from the **Choose expiration** list.

   <figure><img src="https://334437993-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LqH4RJfLVLuHPXuJyTZ%2Fuploads%2FQNTWHMRiOAIE9Qf6GebZ%2F2%20Rotating%20a%20webhook%20-%20rotate%20modal.png?alt=media&#x26;token=5c8bf96c-4ba2-4efa-b745-96a4277e3fdb" alt=""><figcaption></figcaption></figure>
3. Enter your password and click **Rotate webhook signature secret**. The Webhooks page will display the signing secret and **New** next to the modified webhook.

   <figure><img src="https://334437993-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LqH4RJfLVLuHPXuJyTZ%2Fuploads%2Fic2aHWfciqF7RPSFMyBw%2F3%20Rotating%20a%20webhook%20-%20rotate%20new%20complete.png?alt=media&#x26;token=745db0c4-de79-4859-bce9-d7ecbf9bb28f" alt=""><figcaption></figcaption></figure>