---
schema_version: "1"
id: d5b27dcaf1497a11e24e13c24e0f7d22f362352db618636ae058a007a16fbf53
title: Manage Encryption Keys with Bring Your Own Encryption Key (BYOK)
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/pardot_admin_key_management_parent.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.pardot_admin_key_management_parent.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 8faf8afc74879319874be3158cff0371a1b4b38bdcfc06f7f01381e3a3054f16
description: Organizations find BYOK useful for key lifecycle management and control, data protection and security, regulatory compliance, data portability, and more. With BYOK, you can secure your marketing database with an encryption key that you manage and then, in an emergency, revoke access to your Account Engagement data. No one has access to this key–not even Salesforce–so after access is removed, the data becomes unreadable.
products:
  - Marketing
  - Marketing Cloud Account Engagement
release: "264"
---
# Manage Encryption Keys with Bring Your Own Encryption Key (BYOK)

Organizations find BYOK useful for key lifecycle management and control, data protection and security, regulatory compliance, data portability, and more. With BYOK, you can secure your marketing database with an encryption key that you manage and then, in an emergency, revoke access to your Account Engagement data. No one has access to this key–not even Salesforce–so after access is removed, the data becomes unreadable.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available for an additional cost in: <span>Account Engagement <strong>Premium</strong> Edition</span></td></tr></tbody></table>

To add a layer of encryption key management to your business unit, provision Bring Your Own Encryption Key (BYOK) for your Account Engagement data. For detailed instructions, see this Knowledge Article [Provision Bring Your Own Encryption Key for Account Engagement](https://help.salesforce.com/s/articleView?id=000396854&type=1&language=en_US).