---
title: "Managing Encryption Keys"
description: "If your backed-up data is encrypted with a built-in encryption key, it is recommended that you download the data encryption key to your workstation."
canonical: "https://helpcenter.veeam.com/docs/backup_salesforce/userguide/downloading_encryption_keys.html"
breadcrumb: "User Guide > Configuring Veeam Backup for Salesforce > Configuring Encryption Settings > Managing Encryption Keys"
dateModified: "2026-10-16"
---

# Managing Encryption Keys

If your backed-up data is encrypted with a built-in encryption key, it is recommended that you download the data encryption key to your workstation. Otherwise, Veeam Backup for Salesforce will be not able to decrypt the data in case you migrate the product to another workstation.

To download the built-in encryption key, do the following:

1. Switch to the **Configuration** page 
2. Navigate to **Salesforce** > **Encryption Keys**.
3. Choose the necessary key and click **Download Key**.

::: tip

After you download the built-in encryption key to your workstation, you will become able to decrypt data using this key in case of migration. To do that, click **Upload Key**. Keep in mind that you can decrypt only those records and files that were encrypted using the downloaded key.

:::

[![Managing Encryption Keys](images/managing_encryption_keys.png "Managing Encryption Keys")](images/managing_encryption_keys.png){.toggle scale=60}