---
title: Key Manager FAQ
description: Explore Scaleway Key Manager with our comprehensive FAQ covering security, key types, and more.
dates:
  validation: 2025-12-19
productIcon: KmsProductIcon
---

import Encryption from '@macros/key-manager/encryption.mdx'

## Overview

### Why should you use Scaleway Key Manager?

Key Manager helps organizations achieve secure key management by handling low-level and error-prone cryptographic details for you.

### What features does Scaleway Key Manager include?

Scaleway Key Manager allows you to create, manage, and use cryptographic keys in a centralized and secure service. All your cryptographic operations can be delegated to Key Manager, which in turn ensures the security and availability of your keys.

Key Manager is [integrated with Object Storage](/object-storage/how-to/enable-sse-kms/) to store and manage bucket encryption keys.

## Offering and availability

### Which cryptographic operations does Key Manager support?

Key Manager supports the following cryptographic operations:

- [Encryption](/key-manager/concepts/#encryption)
- [Decryption](/key-manager/concepts/#decryption)
- [Data encryption key](/key-manager/concepts/#data-encryption-key-dek) generation
- [Signature](/key-manager/concepts/#signature)
- [Signature verification](/key-manager/concepts/#signature-verification)

### Which algorithms and key usage does Key Manager support?

<Encryption />

Key Manager supports multiple [key usages](/key-manager/concepts/#key-usage) to suit different cryptographic operations:

- Keys with a usage set to `symmetric_encryption` are used to encrypt and decrypt data using symmetric algorithms.
- Keys with a usage set to `asymmetric_encryption` are used for encrypting and decrypting data with asymmetric algorithms, typically involving a public-private key pair.
- Keys with a usage set to `asymmetric_signing` are used for generating and verifying digital signatures, ensuring data authenticity and integrity.

Refer to our [dedicated documentation](/key-manager/reference-content/understanding-key-manager/) to find out more about Key Manager.

### Which management methods can I use with Key Manager?

Read our [dedicated documentation](/key-manager/reference-content/understanding-key-manager/#management-methods-you-can-use-with-key-manager) to find out about the management methods Key Manager provides.

## Pricing and billing

### How is Key Manager billed?

- Symmetric and asymmetric key storage is billed €0.06 per key version monthly.
- Symmetric and asymmetric key operations are billed €0.03 per 10,000 requests.
- Restoring a key scheduled for deletion is billed €0.01 per key.

## Usage and management

### What happens when I delete a key?

When you delete a key, it is scheduled for deletion. This lets you mark a key and its version for deletion ahead of time. Instead of immediate deletion, the key enters a 7-day pending deletion period, during which you can still recover it.

During this time, you can read your key version but cannot edit, access, or delete it. After the retention period, the key and its version are permanently deleted.

Recovering keys [scheduled for deletion](/key-manager/concepts/#scheduled-deletion) is billed €0.01 per key.