---
schema_version: "1"
id: 6dd513c700aff4008cb124c349091fe3972fbcc6363249e0868d8b50bd738c34
title: Generate a Secret Key for Signature Validation
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/data-cloud/data-cloud-int/references/webhook-data-action-targets/c360a-api-generate-secret-key-for-signature-validation.md
canonical_url: https://developer.salesforce.com/docs/data/data-cloud-int/references/webhook-data-action-targets/c360a-api-generate-secret-key-for-signature-validation.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: a7402d7ca296d82f0ac9913f649779f0c4e980b0591a38359abca7a28623d47b
products:
  - Data 360 Integration Guide
  - Data 360 Developer Documentation
---
# Generate a Secret Key for Signature Validation

To protect a webhook system from malicious attacks, generate a secret key for validation. If you don’t generate a secret key, targets don’t receive a payload, and calls are marked with Signing Key Not Found. In Data 360, data actions use the HMACSHA256 signature algorithm.

1.  In Data Cloud, on the Data Actions Target tab, click **New**.

2.  Enter the action target name.

    The Action Target API Name field is auto-filled.

3.  Select **Webhook**.

4.  Enter the URL where you want to publish the webhook events, and click **Save**.

5.  Generate the secret key.

6.  Copy the secret key to your webhook system to validate and protect the integrity of the payload requests sent from Salesforce.