diff --git a/.env.example b/.env.example
index b73c655..b57deab 100644
--- a/.env.example
+++ b/.env.example
@@ -8,9 +8,14 @@ LETSENCRYPT_EMAIL=ops@cast.ph
 # GHL OAuth
 GHL_CLIENT_ID=
 GHL_CLIENT_SECRET=
-# Ed25519 public key from GHL Marketplace app settings (PKIX PEM). Paste the full PEM block.
+# RSA public key (PKIX PEM) used to verify x-wh-signature on incoming webhooks.
+# This is a static key published in GHL docs — not from your app settings.
+# Paste the full multi-line PEM block, or use \n-escaped single-line format.
 GHL_WEBHOOK_PUBLIC_KEY=
 GHL_CONVERSATION_PROVIDER_ID=
+# Ed25519 public key for X-GHL-Signature (GHL migration, expected July 2026).
+# Leave empty until GHL publishes this key and activates the new header.
+GHL_WEBHOOK_ED25519_KEY=
 
 # Cast.ph
 CAST_API_KEY=