If identified users aren't showing up as verified contacts, or identification seems to silently fail:
- Check the HMAC signature is generated server-side, using your current widget secret key — a signature generated with a stale key (after rotation) will fail verification.
- Confirm the identity payload matches what your signature was computed over. A mismatch between the data you signed and the data you send breaks verification.
- If you recently rotated your secret key (see Rotate your widget secret key), make sure your backend is signing with the new key, not the old one.