Rotate keys
Last updated
Last updated
What you'll do: Re-encrypt a vault's contents under fresh keys.
Why it matters: Rotating keys after a password change (or whenever you want a clean cryptographic break) limits the value of any old key material. Oten Drive can rotate automatically or on demand.
After you change a vault password, the app prompts you to rotate.
A progress panel shows the rotation and lets you pause / resume.
Rotation moves through clear states (waiting → processing → done).
Trigger rotation any time from the vault context menu.
Steps
Choose Rotate keys (or accept the prompt after a password change).
Make sure sync is enabled — rotation requires sync so the client and server stay consistent. The app will hold rotation until sync is on.
Let the progress panel run; pause and resume if you need to.
Wait for done before relying on the rotated state on other devices.
Common mistakes
Starting rotation with sync disabled. It won't proceed — enable sync first to avoid an inconsistent state.
Quitting mid-rotation and assuming it finished. Reopen and confirm the panel shows done.
Rotating on one device and switching to another too soon. Let sync catch up so the other device sees the new keys.
Rotation is about hygiene, not daily use — most people rotate after a password change or a suspected exposure.