> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.ressto.co/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How to Find Yoco API Keys and Webhook Signing Secret

# How to Find Yoco API Keys and Webhook Signing Secret

To connect Yoco to your restaurant dashboard, you may need your **Public Key, Secret Key, and Webhook Signing Secret**. Follow the steps below to locate or generate these credentials.

## 1. Log In to Your Yoco Account

1. Open the [Yoco Dashboard](https://app.yoco.com/).
2. Log in using your Yoco business account.
3. Open the **Sell Online** section.
4. Select **Payment Gateway** to access your online payment credentials.

The exact menu labels may vary depending on your account and dashboard version.


![](https://storage.crisp.chat/users/helpdesk/website/-/f/e/c/2/fec2bb2c3e13f800/image_wirn40.png =900x700)

## 2. Find Your Public Key

1. Open the Payment Gateway settings.
2. Select the required environment: **Test** or **Live**.
3. Locate the **Public Key** field.
4. Copy the key and store it securely.

Your public key is used by supported payment integrations for client-side operations.

## 3. Find Your Secret Key

1. In the same Payment Gateway section, locate the **Secret Key** field.
2. Copy the key if it is available.
3. If you cannot view the existing key, follow Yoco's instructions for obtaining or replacing your credentials.

Secret keys commonly begin with `sk_test_` in Test Mode or `sk_live_` in Live Mode.

||| Important: Keep your Secret Key confidential. Never expose it in browser code, screenshots, or public documents.


## 4. Generate Your Webhook Signing Secret

The Webhook Signing Secret is different from your API Secret Key. It is used to verify that webhook notifications genuinely originate from Yoco.

1. Confirm the webhook endpoint URL required by your restaurant integration.
2. Use the Yoco-supported webhook registration process to register that endpoint. This may be handled through the integration or developer API rather than the standard merchant dashboard.
3. When the webhook subscription is created, copy the returned **Webhook Signing Secret**.
4. Store it securely before leaving the response or setup screen.

The signing secret commonly begins with `whsec_`. Yoco may display it only once when the webhook subscription is created. If it is lost, you may need to recreate the subscription and update the integration.

## 5. Enter the Credentials in Your Restaurant Dashboard

1. Log in to your restaurant dashboard.
2. Go to **Settings → Payments → Payment options**.
3. Open **Manage gateways** and select **Yoco**.
4. Enter the required values in their matching fields:
   * **Public Key:** Your Yoco public key.
   * **Secret Key:** Your Yoco secret key.
   * **Webhook Signing Secret:** The secret generated for the registered webhook.
5. Make sure all credentials belong to the same environment.
6. Click **Save**.

Only enter credentials requested by the Yoco gateway configuration.

## 6. Important Security Notes

* Use Test keys for testing and Live keys for real payments.
* Never share your Secret Key or Webhook Signing Secret publicly.
* Do not use your API Secret Key as the Webhook Signing Secret.
* If you replace a key or recreate a webhook subscription, update the corresponding credentials in your restaurant dashboard.
* Test payment processing and webhook notifications before accepting live payments.

**Official references:**

* [Yoco Help Centre — Troubleshooting Online Payments](https://support.yoco.help/en/articles/109554-troubleshooting-yoco-online-payments)
* [Yoco Developer Documentation](https://developer.yoco.com/)
* [Yoco Webhook Handling Guide](https://github.com/sonnenglas/yoco-php-sdk/blob/master/docs/guides/webhook-handling.md)