← Back to glossary

Periodic replacement of cryptographic keys.

Definition

Key rotation is the controlled replacement of cryptographic keys to reduce exposure windows, support revocation, and limit impact of potential compromise.

In plain English Periodic replacement of cryptographic keys.

Why this matters

Why it matters: It reduces the “time at risk” and supports incident response and compliance.

Example

Example: Rotating a customer-managed key and re-encrypting data or wrapping keys.