Identity Verification

Secure your widget with HMAC identity verification to prevent visitor impersonation.

Why Use Identity Verification?

Without verification, anyone could pass fake visitor data to your widget. Identity verification ensures:

Visitors can only use their own identity
User data can't be spoofed
Conversations are securely linked to real users

Setup

#### 1. Get Your Secret Key

Go to Settings > Security and copy your Identity Secret.

#### 2. Generate the Signature (Server-Side)

JavaScript

const crypto = require('crypto');

function generateHalSignature(visitorId, secret) {
  return crypto
    .createHmac('sha256', secret)
    .update(visitorId)
    .digest('hex');
}

#### 3. Pass to Widget

JavaScript

window.HalSettings = {
  visitor: {
    id: 'user-123',
    name: 'John Doe',
    signature: 'abc123...' // From your server
  }
};