---
title: "UPDATE: Basic Authentication for webhooks in workflows has been removed."
description: "Sunset: Basic Authentication with webhooks will be sunset April 8th"
image: https://428357.hs-sites.com/hubfs/raw_assets/public/developers-website/images/CMS-og-image.png
---

# HubSpot Developer Changelog

high-search

### UPDATE: Basic Authentication for webhooks in workflows has been removed.

Announced: February 13, 2019

**What’s happening?**

In an effort to enforce the highest security standards,  basic authentication is being removed from webhooks within workflows. There’s a new, more secure way to help you verify your webhook requests coming from HubSpot. This is done with request signatures. Using request signatures, HubSpot will populate the webhook with an X-HubSpot-Signature header containing a SHA-256 hash of the concatenation of the app-secret + HTTP method + URI + request body.

 More information on request signatures can be found [here](https://428357.hs-sites.com/docs/faq/validating-requests-from-hubspot).

**What’s changing?**

When selecting to “use authentication” with a HubSpot webhook, the option for basic authentication will no longer be available. All users will need to use “request signatures” for webhook authentication.

 **When is this happening?**

 Basic authentication has been removed from webhooks.

 Join the conversation, [here](https://community.hubspot.com/t5/APIs-Integrations/Sunset-Basic-Authentication-with-Webhooks-will-be-sunset-March/m-p/251216#M22158)!