A signed URL includes a cryptographic signature calculated from the URL and application key. Laravel can generate it with signedRoute and validate it with the signed middleware, so changing the path or query parameters invalidates the signature.

A temporary signed URL also includes an expiration time and can be generated with temporarySignedRoute. It is useful for actions such as email verification, limited-time downloads, or invitation links. A valid signature proves that Laravel generated the URL and it has not been altered; it does not by itself replace authorization checks when access must be limited to a particular user or resource.