Everything you need to use KISE SACCO, step by step

1. Open /login.php (or tap Member login on the website).
2. Type your email address or phone number — either works, e.g. 0712 345 678.
3. Enter your password and click Sign in securely.
4. If two-factor authentication is on, enter the 6-digit code from your authenticator app (see below).

Set it up (about one minute)

1. Install Google Authenticator, Microsoft Authenticator or Authy on your phone.
2. Open Account menu → Two-factor authentication (members: Two-factor security in the sidebar).
3. In the app tap + → Scan a QR code, and scan the code on screen. Can’t scan? Type the key shown under it.
4. Enter the 6-digit code the app shows and click the tick.
5. Save your 10 recovery codes — copy or print them and keep them somewhere safe and offline. They are shown only once.

No access to your authenticator app? Get a one-time sign-in code

On the verification screen, open “No access to your authenticator app?” for these instructions:

1. Contact a KISE SACCO Super Administrator (in person or by calling the SACCO office) and ask for a one-time sign-in code.
2. Prove it is really you. The administrator will check your ID in person or call you back on the phone number already on your account. This protects you — attackers often pretend to have “lost their phone”.
3. The administrator clicks Generate sign-in code. An 8-digit code is sent straight to your registered email and phone. The administrator never sees it.
4. On the sign-in page click Start over, sign in with your password, and type the 8-digit code in the verification box. The code works once and expires in 15 minutes.
5. You are taken straight to Two-factor authentication: scan the new QR code with the authenticator app on the phone you have now and confirm. Your old device stops working, and you receive fresh recovery codes — save them.

KISE SACCO works as an installable app — no app store needed. When the app can be installed, an Install KISE SACCO button appears at the bottom-left of the sign-in page and of every page once you are signed in.

1. Android / Chrome / Edge: tap Install KISE SACCO, then Install. The app appears on your home screen or desktop.
2. iPhone / iPad (Safari): tap the button to see the steps: Share → Add to Home Screen → Add.
3. Open KISE SACCO from your home screen. It opens full-screen, like any other app.

Forgot your password?

1. On the sign-in page click Forgot password?
2. Enter your email or phone number and click Send reset link.
3. Open the link within 30 minutes (it works once) and choose a new password.

Password rules

• At least 10 characters with upper- and lower-case letters, a number and a symbol.
• Not a common password, not a keyboard sequence, and not containing your name, email, phone or ID number.
• Not one of your last 5 passwords. Staff passwords expire every 90 days.

To change your password any time: Account menu → Change password. Changing it signs you out of every other device.

Staff-created accounts and resets receive a strong temporary password, which must be changed at first sign-in.

• Account menu → My profile — update your name, email, phone and photo.
• Active sessions lists every device signed in to your account. Sign out other devices ends them instantly.
• Recent sign-ins shows successful and failed attempts, so you can spot anything unusual.
• Sign out from the account menu or the bottom of the sidebar. Always sign out on shared computers.
• If you are idle for 13 minutes a bar warns you; click Stay signed in. At 15 minutes you are signed out automatically.

1. Go to /register.php or click Join KISE SACCO on the website.
2. Fill in your personal details, contacts, employment and next of kin, and create a password.
3. Accept the by-laws and submit. You receive an application number.
4. Staff verify your details. Once approved you receive your member number by SMS and can sign in.

While your application is pending you cannot sign in yet — you will see a message explaining this.

• Total deposits, share capital, loan balance and borrowing power at a glance.
• Action cards — guarantor requests waiting for you, overdue instalments with a Pay now with M-Pesa button.
• Quick actions: deposit, apply for a loan, request a withdrawal, download a statement.
• Accounts, loans, savings goal, recent activity and notices further down.

1. Open Deposit via M-Pesa.
2. Choose what you are paying for — savings, shares, welfare or a loan repayment.
3. Enter the amount and the M-Pesa number to charge (defaults to your registered number).
4. Click send. A prompt appears on your phone: enter your M-Pesa PIN on your phone only.
5. When M-Pesa confirms, the money is posted and you get a notification. Track it in the list of your recent M-Pesa payments on the same page.

1. Open Request withdrawal and pick an account that allows withdrawals.
2. The page shows what is available (balance minus minimum balance and any holds) and any fee or notice period.
3. Enter the amount, how you want to be paid (M-Pesa, bank or cash) and a reason.
4. Confirm with the one-time code sent to your phone and click Submit request.
5. Staff approve the request and a second officer releases the money. You are notified at each step, and you can cancel while it is pending.

1. Try the Loan calculator first to see instalments for any product, amount and period.
2. Open Apply for a loan and select a product. Products you don’t yet qualify for explain why.
3. Enter the amount and period. The quote updates live: instalment, total interest, processing and insurance charges, and what you actually receive.
4. Add guarantors for any amount above your own deposits — search by name or member number; each guarantor’s capacity is shown.
5. State the purpose and click Submit application. Your guarantors are asked to accept from their portal.
6. Follow progress in My loans: pending → guarantors accepted → appraised → approved → disbursed.

• Help & support → Ask for help: choose a category (account, loan, M-Pesa, statement, complaint…), describe the issue and submit. Replies appear in the same ticket and you are notified.
• Announcements — news, AGM notices and dividend updates from the SACCO.
• The bell shows notifications: deposits received, loan decisions, guarantor requests and security alerts.

• Attention strip — work waiting for you: loan applications, membership approvals, loans to disburse, withdrawal requests, open tickets, high arrears.
• KPI tiles — deposits, share capital, loan portfolio, portfolio at risk (PAR 30), members, collections and today’s activity.
• Charts — 12-month savings and credit flows, and portfolio quality by prudential grade.
• Sidebar — only shows modules your role can use. Badges show counts waiting.
• Search (top bar) — find a member by name, member number, phone or ID.

1. Open Membership → Members and click Register member.
2. Enter identity (ID number, names, date of birth, gender), contacts, address, employment and branch.
3. Include an email address to create a portal login; a strong temporary password is generated and sent by SMS/email.
4. If you hold approval rights, tick activate immediately; otherwise the member goes to Pending approvals.
5. Open the new profile to add next of kin, upload the ID copy and photo, and open savings accounts.

• Header — status, deposits, shares, loan balance and borrowing power; quick buttons to post a deposit, start a loan, print a statement or send an SMS.
• Accounts — open new savings accounts; freeze, unfreeze or close accounts (with permission).
• Transactions — full history; authorised staff can reverse a transaction with a reason.
• Loans and guarantees — every loan the member holds or guarantees.
• Next of kin and documents — KYC files are private: they open only for signed-in staff with member access, and every view is audited.
• Portal access — create a login or reset the member’s password.
• Status — mark dormant, suspend, reactivate or exit a member.

1. Open Savings & Shares → Deposits and search for the member.
2. Choose the account (savings, BOSA deposits, shares, welfare…).
3. Enter the amount, method (cash, bank, cheque or M-Pesa) and reference, then post.
4. Print the receipt. The balance updates instantly and a balanced journal entry is created automatically.

Bulk deposits (e.g. a payroll check-off list): open Bulk, paste member no, amount, reference lines and click Post batch. Each line is validated and reported.

• Share capital — record share purchases and transfer shares between members; see who is below the minimum.
• Fixed deposits — open a certificate, set the term and rate, then mature, roll over or break early (with penalty).
• Standing orders — recurring collections from savings into shares, welfare or loan repayments; run daily by the scheduler.
• Savings products (with products.manage) — interest rates, minimum balances, withdrawal rules and notice periods.

1. Open the application. Check eligibility, deposits, existing exposure, guarantor coverage and the repayment schedule.
2. Loan officers / credit: record the appraisal (recommended amount, term, notes) and click Submit appraisal.
3. Approvers: click Approve loan or Decline with a reason.

Mandates are configurable in Settings → Credit policy.

1. Credit → Repayments: search the member, choose the loan and use the quick buttons — One instalment, Clear arrears or Settle in full.
2. Choose the method and reference and post. Each payment clears the oldest instalment first, in the order penalty → interest → principal.
3. When the balance reaches zero the loan closes and every hold and guarantee is released automatically.

M-Pesa repayments (portal or paybill with #LOAN) post automatically.

Credit → Arrears & PAR ages overdue loans into performing, watch, substandard, doubtful and loss, shows provisions and lets you SMS members in arrears.

• Finance → Transactions lists every deposit, withdrawal, fee, repayment and transfer with filters and CSV export.
• To correct a mistake, open the transaction and Reverse with a reason. The original is kept; an equal and opposite entry is posted.
• Nothing is ever deleted — that is what keeps the books auditable.

1. Finance → Expenses → Record expense: category, amount, payee, date and receipt upload.
2. Another authorised person approves or rejects it — you cannot approve your own expense.
3. Mark it paid; the journal entry posts automatically. Receipts are private files viewable only by staff with expense access.

1. Finance → Dividends → New declaration: financial year, dividend rate on shares and interest rate on deposits (as approved by the AGM).
2. Compute payout schedule — see every member’s dividend and interest amounts before anything is paid, and export the schedule.
3. Declare dividend, then Distribute to savings or Capitalise into shares. Members are notified.

1. Engagement → SMS centre. Pick an audience — all members, a branch, members in arrears, due this week, dormant, below minimum shares — or individual numbers.
2. Write the message or start from a template; placeholders such as {name} and {member_no} are filled per member.
3. Check the recipient count and cost estimate, then Send message. Delivery results appear in the log.

Until live SMS credentials are added in Settings, messages are composed and logged but not delivered (simulation mode).

1. Engagement → Announcements → New announcement.
2. Write with the rich-text editor, choose the audience (everyone, members, staff or a role), pin if important and set an expiry.
3. Save as draft or publish. Members see it on their dashboard and announcements page.

1. Website → Blog & news → New article.
2. Add a clear title and a one-to-two-sentence summary, then write the article using headings, lists and quotes.
3. Upload a cover image (1600 × 900 px recommended), choose or create a category, and set a search description.
4. Choose Draft to keep working, Published to go live — or set a future publish date to schedule it. Tick Feature to pin it at the top of the blog.
5. Use Preview to see it exactly as visitors will (drafts are only visible to staff).

The super administrator’s dashboard opens with the Organisation profile: the logos in use, the official phone, email, location, postal address and hours, and a live security posture summary.

1. Click Edit contacts on the dashboard to change phone, email, location, postal address, directions, hours or WhatsApp — then Save contacts. The website, sign-in pages and receipts update instantly.
2. Click Logos (or Administration → Brand & contacts) to upload a new logo (for light backgrounds), white logo (for dark backgrounds) or favicon (square, at least 512 × 512 px). The favicon also regenerates the installed-app icons.
3. Restore default brings back the original KISE SACCO design at any time.
4. The same page edits the SACCO name, home-page headline and introduction, mission, vision, values and social media links.

1. Administration → Staff & users → Add staff member: name, email, phone, role, branch and job title.
2. A strong temporary password is shown once and sent by SMS/email; the staff member must change it and set up 2FA at first sign-in.
3. Use the row menu to Edit, Reset password, Unlock, Suspend, Deactivate, End all sessions, Generate sign-in code (super administrators — see below) or Reset 2FA (removes the authenticator entirely; the person enrols again at next sign-in).

You can only manage accounts less senior than your own, and the last active super administrator cannot be deactivated. The 2FA / No 2FA badge shows who still needs to enrol.

1. Verify the person first. See their ID in person, or call them back on the phone number already on their account. Never use a number, email or WhatsApp contact supplied in the request itself.
2. Open Administration → Staff & users, open the person’s row menu ⋮ and choose Generate sign-in code. For a member, open their profile and use Generate sign-in code in the Portal access card.
3. Read the red warning. Check where the code will be sent (masked email and phone on file).
4. Describe how you verified the request, tick the confirmation box and click Proceed & send code.
5. The system emails the code through the SMTP settings and texts it through the SMS settings. You will not see the code — only a confirmation of where it was sent.
6. Tell the person to click Start over, sign in with their password and enter the 8-digit code. They will be asked to set up their authenticator on their current phone straight away.

• SACCO details — registered name, registration and licence numbers, fees and minimums, dormancy period.
• Security — require 2FA for staff, SMS OTP for members, OTP on withdrawals, password expiry, maker-checker withdrawals, self-registration.
• Credit policy — approval mandates and guarantor release.
• M-Pesa (Daraja) — consumer key and secret, shortcode, passkey, B2C details, the public callback base and the Safaricom IP allow-list. Copy the callback URLs shown (they contain secret keys) into the Daraja portal and click Test connection.
• SMS (AdvantaSMS) — credentials and a test button.
• Email (SMTP) — host, port, encryption (tls for port 587, ssl for 465), username, password (or app password) and sender. Use Send a test email after saving. Email is used for password resets, account notices and administrator-issued sign-in codes.
• Backups (Amazon S3) — super administrators only; see Backups.
• General ledger mapping — which account each automatic posting uses.

The system backs itself up automatically every 6 hours. Each run creates a new, encrypted file in your S3 bucket, and backup files older than 14 days are deleted automatically.

1. Create a private S3 bucket (for example in af-south-1 — Cape Town) and an IAM user that may only PutObject, ListBucket and DeleteObject on it.
2. Open Administration → Settings → Backups (Amazon S3) (visible to super administrators only).
3. Switch on Upload to Amazon S3 and enter the bucket name, region, folder (prefix), access key ID and secret access key. Keep Back up every at 6 hours and Delete backups older than at 14 days unless your policy says otherwise.
4. Click Save, then Test S3 connection — it uploads, lists and deletes a small test file.
5. Click Run backup now and confirm a Success row appears in the history table.

You can also create a backup and download an encrypted copy from Administration → Maintenance → Back up now & download encrypted copy.

• Health checks — books balance, no overdrawn accounts, audit chain intact, HTTPS, least-privilege database account, 2FA coverage, M-Pesa callback protection and more. Fix anything shown in amber or red.
• Scheduled jobs — run loan ageing, standing orders, reminders, dormancy and interest by hand if the scheduler missed a run.
• Backup — shows the last automatic backup and lets a super administrator create a backup now and download the encrypted copy (logged as a critical action).
• Health checks also confirm that the database is encrypted at rest and that a successful off-site backup ran within the schedule.
• Clean up logs — removes old operational logs. The audit trail is never pruned.