This guide walks you through the latest improvements to the Custom Webhook action. It focuses on better security and easier credential management.
Overview
The Custom Webhook action now supports masked secret keys for Basic auth, Bearer token and API key authentication methods. This update helps stop sensitive information from being exposed by accident. It also gives you an easier way to manage and store credentials.
Key Improvements
Masked Secret Keys
Secure Storage: All secret keys are stored securely and masked in the interface.
Supported Auth Methods: Basic auth, Bearer token or API key.
Reduced Exposure: Keys are never shown in plain text, which minimises the risk of leaks.
User-Friendly Credential Management
Key Management: Pick an existing key or create a new one from a dropdown menu.
Restricted Removal: Only the ZipLeads support team or the person who created the key can delete it.
Account-Level Security: Keys can only be used within the account where they were created.
Why These Updates Matter
Enhanced Security
Secret keys are masked, which greatly lowers the chance of accidental leaks.
Keys are identified by their name, not their actual value, which reduces risk.
Better Access Control
Sensitive credentials can only be edited by the person who created them and by admins in your account.
Getting Started
Follow these steps to add and set up a new Custom Webhook action in your Automations builder.
Add a Custom Webhook Action
In your Automations builder, select Custom Webhook as the action step.
Select Authentication Type
Choose one of these methods: Basic auth, Bearer token or API key.
Configure Credentials
Choose Create New Key.
Enter a key name (so you can identify it) and the key value (the actual credential).
Once saved, the key is masked, so it won't appear in plain text.
Monitor & Manage
Use the dropdown menu to select or delete keys as needed.
Important Notes
Deletion Permissions: Only the ZipLeads support team or the key's creator can delete it.
Existing Keys: When you update to a new key, the old key is removed automatically.
