How to accept Swish payments

Ask your business bank for Swish Handel, the Swish agreement for websites, and name your certificate contact. Your bank then gives you your Swish number: ten digits starting with 123.

Creating the certificate takes about 15 minutes.

1. 1

   Create a key and a signing request

   Run this command in a terminal, with your organisation number in place of 5566778899 and your Swish number in place of 1231234567:

   openssl req -newkey rsa:4096 -nodes -keyout swish-private.key -out swish.csr -subj "/C=SE/O=5566778899/CN=1231234567"

   It creates swish.csr, your signing request, and swish-private.key, your private key. Keep the key private: it is your business's identity at Swish.

2. 2

   Log in to the Swish portal

   Your certificate contact opens portal.swish.nu, enters your organisation number and Swish number, and approves with Mobile BankID.

3. 3

   Paste the signing request

   Open swish.csr in a text editor and copy all of it, BEGIN and END lines included. Paste it into the CSR field on the New certificate tab.

4. 4

   Generate the certificate

   Choose PEM as the format and your bank's BIC as the issuer, then generate it.

5. 5

   Save the certificate

   Copy all of the certificate text the portal shows, from the first BEGIN CERTIFICATE line to the last END CERTIFICATE line. Save it in a text editor as swish-cert.pem.

1. 1

   Open the Swish card

   Go to Configuration → Payment options and click the Swish card under Online payments → Payment gateways. Not there? Choose Show all gateways under the cards.

2. 2

   Choose the country and currency

   Pick the Country where your Swish account and its bank account are, and the Currency travellers pay in. Click Add. To change either later, remove Swish with Remove and add it again.

3. 3

   Fill in your API credentials

   Under Authentication, the card has a field for each:
   Swish number
   Certificate (PEM)
   Private key (PEM)

   Each field saves when you click out of it.

4. 4

   Activate Swish

   Click Activate once every field is filled in. The card turns Active, and travellers can pay with Swish on your booking page. Every payment goes straight into your own Swish account: TourTask never holds your money.

Swish has no test mode: test it right away with one small real payment.

1. 1

   Book your cheapest tour

   On your own booking page, choose Swish and pay with the Swish app on your phone.

2. 2

   Check the booking

   It shows as paid as soon as you approve, and the money is in your bank account.

3. 3

   Refund the payment

   In the booking, choose Refund payment in the payment's ⋮ actions menu. Press Refund remaining, then Refund via Swish, then Save.

A Swish certificate usually lasts about two years. When it expires, Swish payments stop, and TourTask does not warn you.

Put the expiry date from the Swish portal in your calendar, with a reminder a few weeks ahead. To renew, create a new certificate the same way and paste it and its new private key into TourTask.