SecurityBoth apps
Security Hardening Across WhatFlow
A round of security improvements adds stronger checks on incoming WhatsApp events, tighter protection for merchant admin pages, and verification at signup.
Applies to: WhatFlow Business API (official API app) and WhatFlow Chat Automation (unofficial API app)
What's new
- Incoming WhatsApp events must pass signature checks before they are processed.
- Merchant admin pages are never stored in shared caches.
- Tighter checks on changes made from the admin.
- The WhatsApp Business account is verified during signup.
Why it matters
Your store data and WhatsApp connection are better protected.
Related updates
- Shopify Sidekick Writes Better WhatsApp Messages · Improvement
- Faster App Home, Install and Sign-In · Improvement
- Fix: Pages Waiting on Session Renewal for Returning Merchants · Bug Fix