Zoom made changes to webhook validation and verification. Webhook endpoints now require initial manual validation and periodic validation every 72 hours. New webhooks created after October 23, 2022 will require validation. All webhooks will require validation by June 2025. The webhook verification token is deprecated and will be sunset in June 2025. There is a new way to verify webhooks using a secret token and x-zm-signature header.

Webhook URL validation enforcement and verification changes


## What is happening to webhook validation?

Webhook endpoints require initial manual validation before Zoom will send events to them. Endpoints will also be validated every 72-hours using a challenge-response check.

*Webhook validation is required for all new webhooks* created **after October 23, 2022**. Existing webhooks created before this date do not require validation unless modified.

See [Validate your webhook endpoint](/docs/api/webhooks/#validate-your-webhook-endpoint) for details.


## What is happening to webhook verification?

The Webhook verification token is deprecated and will sunset in **June 2025**.

There is a new way to verify that Zoom sends webhook events using a new secret token and x-zm-signature header. We recommend that you replace your existing webhook verification logic with this new logic, described in [Verify webhook events](/docs/api/webhooks/#verify-webhook-events).
