Early access — use code HOOKSENSEWELCOME for 1 month free
Share feedback →

Shopify Webhooks

How to Test Shopify Webhooks Locally (2026)

Shopify webhooks notify your application about store events like new orders, product updates, and customer registrations. Shopify signs webhooks with HMAC-SHA256 using your app's API secret.

Signature Header

X-Shopify-Hmac-Sha256

Algorithm

HMAC-SHA256 (Base64)

Setup Guide

  1. 1Create a free HookSense endpoint at hooksense.com
  2. 2Copy your unique webhook URL
  3. 3In Shopify Admin → Settings → Notifications → Webhooks
  4. 4Click 'Create webhook' and select the event
  5. 5Paste your HookSense URL as the callback URL
  6. 6Your app's API secret key is used for HMAC — add it to HookSense
  7. 7Place a test order or update a product to trigger the webhook

Common Shopify Webhook Events

orders/create
orders/updated
orders/paid
orders/cancelled
products/create
products/update
customers/create
app/uninstalled

Forward to Localhost

Use HookSense CLI to forward Shopify webhooks directly to your local development server:

npx hooksense listen -p 3000 --path /api/integrations/shopify

No ngrok or tunnel setup required. Install with npm i -g hooksense or use npx.

Tips & Best Practices

  • Shopify uses Base64-encoded HMAC — HookSense handles this automatically
  • Mandatory webhooks (GDPR) must be registered in your Partner Dashboard
  • Use HookSense to inspect the full payload structure before writing your handler
  • Shopify has rate limits on webhook subscriptions — monitor with HookSense

Related

Shopify Webhook Documentation HMAC Signature Calculator HMAC Verification Guide HookSense Documentation

Start Testing Shopify Webhooks

Create a free endpoint and receive your first Shopify webhook in seconds.

Get Started Free