// definition
Recovery key
A secret used to regain access to protected data
Short definition
A secret used by a service or application to regain access to protected data. The copies it can unlock, required permissions and additional protections depend on the architecture. Its storage needs to be planned alongside backups and restoration rights. Copies already obtained require separate assessment when keys are changed.
risk atlas
Knowledge map
Related analyses
Primary sources
- NIST, SP 800-57 Part 1, revision 54 May 2020, sections 8.2.2.1 and 8.2.2.2: backup and recovery of keying material depend on its use.
- Signal, Secure BackupsCurrent product documentation: the recovery key’s role in restoring this service’s encrypted archive.