thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Key Escrow

Storing a copy of cryptographic keys with a trusted third party so they can be recovered if needed.

Definition

Key escrow supports recovery of encrypted data when keys are lost or for authorized legal access. Escrowed keys must be strongly protected, often with split knowledge and dual control. Signing keys should not be escrowed because doing so undermines non-repudiation.

Example

BitLocker recovery keys are escrowed in Microsoft Entra ID so the help desk can unlock a user's laptop.

Exam tip

Escrow encryption keys, not signing keys.

Related terms