---
title: Create a Key Manager key
description: Discover how to create a key from the Scaleway console to decrypt your data using Scaleway's Key Manager.
tags: key-manager encryption data key
dates:
  validation: 2025-08-27
  posted: 2025-02-06
---
import Requirements from '@macros/iam/requirements.mdx'


Scaleway's Key Manager allows you to create key encryption keys from the [Scaleway console](https://console.scaleway.com). Key encryption keys can then be used to encrypt and decrypt your encrypted data.

<Requirements />

- A Scaleway account logged into the [console](https://console.scaleway.com)
- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization

## How to create a Key Manager key

1. Click **Key Manager** in the **Security & Identity** section of the [Scaleway console](https://console.scaleway.com) side menu.
2. Click **+ Create key**.
3. Choose the region in which you want to create your key.
4. Enter a name, a description, and optional tags for your key.
5. Select the [encryption method](/key-manager/concepts/#encryption-method) for your key. Key Manager supports:
    * [Symmetric encryption](/key-manager/concepts/#symmetric-encryption) using the `AES-256 CGM` algorithm
    * [Asymmetric encryption](/key-manager/concepts/#asymmetric-encryption) using the `RSA_OAEP_2048_SHA256`, `RSA_OAEP_3072_SHA256` (recommended), or `RSA_OAEP_4096_SHA256` algorithms.
    * [Asymmetric signature](/key-manager/concepts/#signature) using the `EC_P256_SHA` (recommended), `EC_P384_SHA384`, `RSA_PKCS1_2048_SHA256`, `RSA_PCKS1_3073_SHA256`, `PSA_PKCS1_4096_SHA256`, `RSA_PSSS_2048_SHA256`, `RSA_PSS_3072_SHA256`, and `RSA_PSS_4096_SHA256` algorithms.
6. Switch the <Icon name="toggle" /> icon to disable [key protection](/key-manager/concepts/#key-protection) or leave it enabled.
    <Message type="note">
     Key protection allows you to protect your key from accidental deletion.
    </Message>
7. Check the estimated cost, then click **Create key**. Your key's **Overview** page displays.