---
schema_version: "1"
id: 67346791683f440d9bdcee1246bbb57730d332337751a7f00470b596974e73e1
title: Rotate an Encryption Key in Marketing Cloud Engagement
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_overview_rotate_byok.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_overview_rotate_byok.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: aa777e1cbdfc85c5a76f2ee1bbca869c6e7088eb09e2d33130ef80fac5dc4094
description: Follow these steps to rotate your encryption key in Marketing Cloud Engagement for Data at Rest Encryption. This process makes an imported key active and replaces the current encryption key.
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# Rotate an Encryption Key in Marketing Cloud Engagement

Follow these steps to rotate your encryption key in Marketing Cloud Engagement for Data at Rest Encryption. This process makes an imported key active and replaces the current encryption key.

1. Hover over your name and click **Setup**.
2. Type Bring Your Own Key in the search field and click **Bring Your Own Key**.
3. Click **Rotate** and select a key that you imported.
4. Confirm and click **Rotate Key**.

After you rotate the key, the key updates to an active state and the previously active key updates to a deactivated state.