# Webhook URL validation enforcement and verification changes

<!-- WARNING: THIS FILE WAS AUTOGENERATED! DO NOT EDIT! -->

## What is happening to webhook validation?

Webhook endpoints require initial manual validation before Zoom will send events to them. Endpoints will also be validated every 72-hours using a challenge-response check.

_Webhook validation is required for all new webhooks_ created **after October 23, 2022**. Existing webhooks created before this date do not require validation unless modified.

See [Validate your webhook endpoint](/docs/api/webhooks/#validate-your-webhook-endpoint) for details.

## What is happening to webhook verification?

The Webhook verification token is deprecated and will sunset in **June 2025**.

There is a new way to verify that Zoom sends webhook events using a new secret token and x-zm-signature header. We recommend that you replace your existing webhook verification logic with this new logic, described in [Verify webhook events](/docs/api/webhooks/#verify-webhook-events).