Identity Verification Secret

REST API Reference

Metadata for an HMAC secret used to sign user_hash values for Messenger identity verification. The secret field is intentionally omitted — it is only returned once, in the response to POST /secure_mode_secrets.

typestring

value is "identity_verification_secret"

Example:"identity_verification_secret"

idstring

The id of the secret

Example:"102"

namestring

Human-readable name for the secret, used to identify it in rotation flows

Example:"Production Web"

supports_androidboolean

Whether the secret is enabled for the Android SDK

Example:false

supports_iosboolean

Whether the secret is enabled for the iOS SDK

Example:false

supports_webboolean

Whether the secret is enabled for the Messenger on web

Example:true

created_atinteger

The time the secret was created, as a Unix timestamp

Example:1734537243

{
  "type": "identity_verification_secret",
  "id": "102",
  "name": "Production Web",
  "supports_android": false,
  "supports_ios": false,
  "supports_web": true,
  "created_at": 1734537243
}