# Getting 401 invalid signature while using webhook call

**URL:** <https://forums.distill.io/t/getting-401-invalid-signature-while-using-webhook-call/5951>\
**Category:** Help and Support\
**Created:** [March 30, 2026, 5:14am UTC](https://forums.distill.io/t/getting-401-invalid-signature-while-using-webhook-call/5951 "2026-03-30T05:14:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sundae025269](https://forums.distill.io/letter_avatar_proxy/v4/letter/s/57b2e6/32.png) [@sundae025269](https://forums.distill.io/u/sundae025269)\
**Post date:** [March 30, 2026, 5:14am UTC](https://forums.distill.io/t/getting-401-invalid-signature-while-using-webhook-call/5951/1 "2026-03-30T05:14:47Z")

</div>

**I am unable to use webhook call from distill due to invalid signature (401) error, However same signature and secret works manually. I tried same signature in Uptime monitor and it worked but it doesn’t work when I monitor webpage.**

---

<div class="post-metadata">

**Author:** ![srijith](https://forums.distill.io/letter_avatar_proxy/v4/letter/s/c77e96/32.png) [@srijith](https://forums.distill.io/u/srijith)\
**Post date:** [March 30, 2026, 9:45am UTC](https://forums.distill.io/t/getting-401-invalid-signature-while-using-webhook-call/5951/2 "2026-03-30T09:45:09Z")

</div>

@sundae025269 Thanks for the detailed explanation.

From what you’ve described, the **401 “invalid signature”** error is being returned by your webhook endpoint, which means:

- The request from Distill is reaching your server successfully

- But your server is **rejecting it during signature validation**

Since the same secret/signature works with your manual tests and Uptime monitor, the most likely cause is that the **request payload or format differs** when triggered from a Webpage monitor.

* * *

### Quick way to debug

As a next step, you can:

1. Point your webhook temporarily to a request inspector (e.g., webhook.site)

2. Trigger the Webpage monitor

3. Capture the **exact request**

4. Compare it with the request that works

This will help identify what is different in the payload being signed.
