Skip to main content
For compliance or backup purposes, you can provide your own master key: 
# Generate a key
openssl rand -base64 32

# Use during init
kfl init --master-key "K7gNU3sdo+OL0wNhqoVWhr3g6s1xYv72ol/pe/Unols="
If MASTER_KEY already exists on the worker, the provided key is ignored. This prevents accidental data loss from key rotation.

Next Steps

Security & Backup

Back up your master key and define your recovery strategy.

Encryption Details

Understand how the master key is used to encrypt your secrets.