Skip to main content

Signature Simulator

Set up and test an X-Signature without leaving the browser: make a test key pair, build the request, sign it, and verify the result.

Everything runs in your browser. Keys, parameters and signatures are never sent to Flip or anywhere else. The full rules are in the Signature (X-Signature) guide.

1. Key pair

Replaces the OpenSSL commands

Generate an RSA 2048-bit test key pair here, or paste a private key you already have. The public key is what you email to Flip; the private key signs your requests.

Takes about a second.

Use generated keys for Sandbox testing. For Production, generate the key pair on a machine your team controls and keep the private key in a secret manager.

Private key (keep secret)
Public key (send to Flip)
Email to Flip with this public key
To: [email protected] · Subject: Request setup Public Key and Enable signature feature
Hi Flip Team,

We would like to set up our public key and enable the signature feature for our account.

Flip for Business Email : <email account registered on Flip for Business>
Company Name            : <your registered company name>
Environment             : <Sandbox / Production>
PIC Name                : <technical contact name>
PIC Email/Phone         : <technical contact email or phone>

Our public key:

<paste public_key.pem>

Thank you.

How the payload is built

  • Query string parameters first (in URL order), then body fields (in body order). Headers are never signed.
  • Each name is used once. Every value is a string, even numbers.
  • Compact JSON with no spaces. Money Transfer APIs keep / and non-ASCII characters and escape &, <, >; International Transfer APIs escape / as \/ and non-ASCII characters as \uXXXX.
  • No parameters: {} for Money Transfer, [] for International Transfer.
  • Get International Transfer signs the transaction ID from the URL as id.
  • Sign the UTF-8 bytes with RSA PKCS#1 v1.5 + SHA-256 and send standard Base64 in X-Signature.