← Security+ glossary

Key escrow

A practice in which a copy of a cryptographic key is stored with a trusted third party or within the organization for the purpose of data recovery. It enables decryption if a user loses their key or leaves the company, but it introduces an additional point of risk that must be strictly protected.

All Security+ guides →