Koko BNPL setup
Get your merchant credentials, RSA key pair, and plugin info from paykoko.com and connect Koko to your storefront.
Koko lets your customers split a purchase into 3 (or 6, for some accounts) interest-free payments. You get paid the full amount up front; Koko collects from the customer over time. Adding it can lift your conversion on bigger-ticket items.
What you'll need
- A Koko merchant account.
- About 30 minutes (key generation takes a few minutes).
- Patience — Koko's setup involves uploading a security key file, which we'll walk through step by step.
Step 1 — Apply with Koko
- Go to paykoko.com and apply for a merchant account.
- Send them your business documents. Approval usually takes 5-10 working days.
- Once approved, Koko gives you access to their merchant dashboard.
Step 2 — Copy your Merchant ID and API Key
- Sign in to the Koko merchant dashboard.
- Open Integrations → API Keys.
- Copy your Merchant ID (32 characters, looks like a long jumble of letters and numbers).
- Copy your API Key.
Step 3 — Generate your security key pair
Koko uses a security technique called RSA keys to make sure messages between Koko and your store can't be faked. You need two files: a Private Key (you keep) and a Public Key (you give to Koko).
Some merchant accounts are issued these by Koko directly — check your welcome email. If you got them, skip to Step 4. Otherwise, ask Koko support to generate them for you, or follow these instructions on a Mac/Linux terminal:
# Run these in a terminal
openssl genrsa -out koko_private.pem 2048
openssl rsa -in koko_private.pem -pubout -out koko_public.pemTwo files appear: koko_private.pem and koko_public.pem. Open them in any text editor (TextEdit, Notepad).
Step 4 — Upload your Public Key to Koko
- In the Koko dashboard, go to Integrations → Public Key.
- Open
koko_public.pemin a text editor and copy everything — including the lines that say-----BEGIN PUBLIC KEY-----and-----END PUBLIC KEY-----. - Paste it into Koko and save.
Step 5 — Set up the webhook
Koko notifies your store when a customer completes a payment. Tell Koko where to send those notifications.
Webhook URL
https://gannako.com/api/webhooks/koko- In Koko's dashboard, look for Integrations → Response URL or Callback URL.
- Paste the URL above.
- Save.
Step 6 — Paste everything into Gannako
- Open Settings → Payments → Koko in your Gannako admin.
- Click the API Credentials tab.
- Paste your Merchant ID (32 characters).
- Paste your API Key.
- Open
koko_private.pemin a text editor, copy everything (including the BEGIN/END lines), and paste into the Private Key field. - Do the same with
koko_public.pemfor the Public Key field. - Leave Plugin Name as
customapiand Plugin Version as1.0.1unless Koko told you different values. - Click Save.
Step 7 — Choose installment plans
- Open the Installments tab.
- Tick which terms to offer at checkout. Standard accounts only have 3 months — most merchants leave only 3 selected. If your account is on Koko PRISM, also tick 6.
- Pick a default. The customer can still change it on Koko's page.
Step 8 — Test, then go live
- Leave Test Mode on. Sandbox URL is
qaapi.paykoko.com. Place a test order using Koko's sandbox test data (they email this to you). - Confirm the order shows as Paid in your admin.
- Switch Test Mode off. Production URL is
prodapi.paykoko.com. Run a real order on a small item.