How to Find Yoco API Keys and Webhook Signing Secret

To connect Yoco to your restaurant dashboard, you may need your Public Key, Secret Key, and Webhook Signing Secret. Follow the steps below to locate or generate these credentials.

1. Log In to Your Yoco Account

1. Open the Yoco Dashboard.
2. Log in using your Yoco business account.
3. Open the Sell Online section.
4. Select Payment Gateway to access your online payment credentials.

The exact menu labels may vary depending on your account and dashboard version.

2. Find Your Public Key

1. Open the Payment Gateway settings.
2. Select the required environment: Test or Live.
3. Locate the Public Key field.
4. Copy the key and store it securely.

Your public key is used by supported payment integrations for client-side operations.

3. Find Your Secret Key

1. In the same Payment Gateway section, locate the Secret Key field.
2. Copy the key if it is available.
3. If you cannot view the existing key, follow Yoco's instructions for obtaining or replacing your credentials.

Secret keys commonly begin with sk_test_ in Test Mode or sk_live_ in Live Mode.

4. Generate Your Webhook Signing Secret

The Webhook Signing Secret is different from your API Secret Key. It is used to verify that webhook notifications genuinely originate from Yoco.

1. Confirm the webhook endpoint URL required by your restaurant integration.
2. Use the Yoco-supported webhook registration process to register that endpoint. This may be handled through the integration or developer API rather than the standard merchant dashboard.
3. When the webhook subscription is created, copy the returned Webhook Signing Secret.
4. Store it securely before leaving the response or setup screen.

The signing secret commonly begins with whsec_. Yoco may display it only once when the webhook subscription is created. If it is lost, you may need to recreate the subscription and update the integration.

5. Enter the Credentials in Your Restaurant Dashboard

1. Log in to your restaurant dashboard.
2. Go to Settings → Payments → Payment options.
3. Open Manage gateways and select Yoco.
4. Enter the required values in their matching fields:
5. • Public Key: Your Yoco public key.
   • Secret Key: Your Yoco secret key.
   • Webhook Signing Secret: The secret generated for the registered webhook.
5. Make sure all credentials belong to the same environment.
6. Click Save.

Only enter credentials requested by the Yoco gateway configuration.

6. Important Security Notes

• Use Test keys for testing and Live keys for real payments.
• Never share your Secret Key or Webhook Signing Secret publicly.
• Do not use your API Secret Key as the Webhook Signing Secret.
• If you replace a key or recreate a webhook subscription, update the corresponding credentials in your restaurant dashboard.
• Test payment processing and webhook notifications before accepting live payments.

Official references:

• Yoco Help Centre — Troubleshooting Online Payments
• Yoco Developer Documentation
• Yoco Webhook Handling Guide

Updated on: 21/10/2026