> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databunker.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Encryption key rotation

Encryption key rotation is a critical process in Databunker Pro to maintain the confidentiality and integrity of sensitive data. The **Wrapping Key**, which encrypts the **Master Key**, is rotated periodically as part of this process to enhance security.

## What is the Master Key?

The **Master Key** is the core encryption key used to protect sensitive data. It is never exposed and is encrypted using a Wrapping Key for additional security.

## What is the Wrapping Key?

The Wrapping Key is a cryptographic key used to encrypt the **Master Key** in Databunker Pro. It acts as an additional layer of protection for the Master Key

## Importance of Key Rotation:

1. **Limiting Key Exposure:** Regular rotation reduces the window of opportunity for potential attackers to compromise the key.
2. **Compliance:** Many security standards and regulations require periodic key rotation.
3. **Mitigating Long-term Attacks:** Rotation helps protect against slow, persistent attempts to break encryption.

## Best Practices:

* Rotate the Wrapping Key at regular intervals (e.g., every 90 days or annually).
* Implement automated reminders for key rotation.
* Maintain a secure log of key rotations for audit purposes.
* Test the rotation process regularly to ensure smooth execution when needed.

## Recovery:

In case the current Wrapping Key is lost or compromised, Databunker Pro allows for recovery using [Shamir Key Shares](/pro/administration/shamir-keys). This ensures that the Master Key can be safely re-encrypted with a new Wrapping Key without exposure.