Sec-WebSocket-Accept

Response headers

Returns the client key hashed in a fixed way; the handshake only completes if it matches.

On the wireSec-WebSocket-Accept: …
CategoryResponse headers

Headers the server attaches when it answers.

How to read this

  • The first digit of a status code carries the meaning: 4 means the request, 5 means the server.
  • 404 means "not there"; 403 means "there, but not for you". Swapping them makes debugging slower.
  • Header names are case-insensitive — Content-Type and content-type are the same header.
  • Caching and CORS problems usually come down to one header line, visible in the browser’s network tab.

Frequently asked questions

Q. What does HTTP Sec-WebSocket-Accept mean?

Returns the client key hashed in a fixed way; the handshake only completes if it matches.

Q. What does Sec-WebSocket-Accept look like on the wire?

It travels as Sec-WebSocket-Accept: …

Q. Where does Sec-WebSocket-Accept appear?

In response headers.

Q. What group does Sec-WebSocket-Accept belong to?

The response headers group; the rest of that group is listed further down.

Same group

Reference docs