Rotate keys using the Scaleway console

Key rotation is a critical security practice that ensures that encryption keys are not reused for extended periods of time. Regularly rotating keys helps limit the number of messages encrypted with the same key version.

This reduces the risk of exposure if a key is compromised, thus enhancing the overall security and resilience of your system. For symmetric encryption, it is generally recommended to rotate keys every 30 to 90 days.

Before you startLink to this anchor

To complete the actions presented below, you must have:

• A Scaleway account logged into the console
• Owner status or IAM permissions allowing you to perform actions in the intended Organization
• Created a Key Manager key

How to rotate keysLink to this anchor

1. Click Key Manager in the Security and Identity section of the Scaleway console side menu. Your keys display.
2. Click the key you want to rotate. Your key’s Overview tab displays.
3. Scroll down to the Key rotation section, and click Rotate key. A tooltip displays to confirm the rotation was performed.
   Note

   Rotating your key creates a new version of it. All cryptographic operations will use the new key rotation. All data encrypted with former key versions will remain decipherable with the former key.

4. Check that your key was rotated under the Current rotation field in the Key information section.