© 2026 Billplz Sdn Bhd

The X Signature key lets Billplz sign its webhook callbacks so your server can verify they genuinely came from Billplz. Enable it before going live with any integration that uses redirect or callback URLs.

Before you begin

  • Your Billplz account must be verified and active.
  • You need your Secret key ready — X Signature is a separate credential used specifically for callback verification.

Step 1: Go to Settings

In your Billplz dashboard, click your account name in the top right corner. Select Settings from the dropdown.

Billplz Dashboard - Opening the organization profile header menu to navigate to settings.

Step 2: Open Keys & Integration

On the Settings page, click the Keys & Integration tab.

Billplz Account Settings - Locating and selecting the "Keys & Integration" navigation tab.

Step 3: Enable X Signature

Under X Signature Payment, tick the Enable X Signature Payment Completion checkbox.

Billplz Keys & Integration - The XSignature Payment section with the option "Enable Extra Payment Completion Information" left unchecked.

Step 4: Save and copy your X Signature key

Click Save & Copy X Signature key. Your key is saved and copied to your clipboard.

Billplz Keys & Integration - Checking the box for "Enable Extra Payment Completion Information" to generate and copy the XSignature Key.

Use this key in your server to validate the x-signature value sent with every Billplz callback.

Common issues