title: “Request encryption key rotation” description: “Trigger annual or emergency rotation of your organisation’s KMS keys.” audience: [“org_admin”] modules: [“seguridad”] estimated_minutes: 3 last_reviewed: “2026-05-03”

Request encryption key rotation

Ministrium rotates keys automatically every 365 days. This recipe covers manual rotation (post-incident).

TL;DR

Settings → Security → Encryption → Rotate keys now.

Steps

1. Settings → Security → Encryption. 2. Press Rotate keys now. 3. Indicate the reason (routine audit, possible compromise, internal policy). 4. Confirm. Rotation runs in background (typically under 60 minutes). 5. Receive email when done. The new version is active for all new encryption; existing data is re-encrypted progressively.