Overview
Stripe Signature Validation Failed means PayPress received a webhook request that could not be verified with the saved Stripe webhook signing secret.
Symptoms
- Diagnostics show signature validation failure.
- Stripe webhook delivery may show a failed response.
- Orders or refunds do not update.
- The event does not process.
Likely Causes
- Wrong webhook signing secret.
- Webhook was created in Test Mode but PayPress is in Live Mode, or the reverse.
- Request did not come from Stripe.
- Payload was modified before reaching WordPress.
- Server, firewall, or plugin changed the webhook request body.
Resolution Steps
- Confirm PayPress mode matches the Stripe webhook mode.
- Confirm the webhook signing secret saved in PayPress matches Stripe.
- Recreate the webhook automatically if needed.
- Confirm no firewall or plugin modifies webhook requests.
- Check Stripe webhook delivery logs.
- Run a new test checkout.
Expected Result
Valid Stripe webhook requests should pass signature validation and proceed to ownership validation and event handling.
Additional Notes
Do not log sensitive webhook payloads. Safe diagnostics include source IP, User-Agent, request URL, and whether the Stripe signature header was present.