# Is default encryption key provided by Sailpoint random? For example, Can Sailpoint employees/"anyone with their default sailpoint key" decrypt my cipher text encrypted using my default key?

**URL:** <https://developer.sailpoint.com/discuss/t/is-default-encryption-key-provided-by-sailpoint-random-for-example-can-sailpoint-employees-anyone-with-their-default-sailpoint-key-decrypt-my-cipher-text-encrypted-using-my-default-key/85225>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq\
**Created:** [October 11, 2024, 3:35pm UTC](https://developer.sailpoint.com/discuss/t/is-default-encryption-key-provided-by-sailpoint-random-for-example-can-sailpoint-employees-anyone-with-their-default-sailpoint-key-decrypt-my-cipher-text-encrypted-using-my-default-key/85225 "2024-10-11T15:35:03Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![vasas](https://avatars.discourse-cdn.com/v4/letter/v/82dd89/32.png) [@vasas](https://developer.sailpoint.com/discuss/u/vasas)\
**Post date:** [October 11, 2024, 3:35pm UTC](https://developer.sailpoint.com/discuss/t/is-default-encryption-key-provided-by-sailpoint-random-for-example-can-sailpoint-employees-anyone-with-their-default-sailpoint-key-decrypt-my-cipher-text-encrypted-using-my-default-key/85225/1 "2024-10-11T15:35:03Z")

</div>

## Which IIQ version are you inquiring about?

8.4

---

<div class="post-metadata">

**Author:** ![enistriminsait](https://avatars.discourse-cdn.com/v4/letter/e/58f4c7/32.png) [@enistriminsait](https://developer.sailpoint.com/discuss/u/enistriminsait)\
**Post date:** [October 11, 2024, 4:11pm UTC](https://developer.sailpoint.com/discuss/t/is-default-encryption-key-provided-by-sailpoint-random-for-example-can-sailpoint-employees-anyone-with-their-default-sailpoint-key-decrypt-my-cipher-text-encrypted-using-my-default-key/85225/2 "2024-10-11T16:11:21Z")

</div>

Hi @vasas,

Every key generated is correlated on the server where SP is installed.

In every case is better, active the [keystore](https://community.sailpoint.com/t5/Technical-White-Papers/Using-the-IdentityIQ-Keystore/ta-p/75490) for improve the security and change the default pwd of spadmin.

---

<div class="post-metadata">

**Author:** ![paul\_hilchey](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/paul_hilchey/32/24080_2.png) [@paul\_hilchey](https://developer.sailpoint.com/discuss/u/paul_hilchey)\
**Post date:** [October 12, 2024, 3:46am UTC](https://developer.sailpoint.com/discuss/t/is-default-encryption-key-provided-by-sailpoint-random-for-example-can-sailpoint-employees-anyone-with-their-default-sailpoint-key-decrypt-my-cipher-text-encrypted-using-my-default-key/85225/3 "2024-10-12T03:46:29Z")

</div>

Vasanth,

Yes, the default key is the same on all deployments.

It is best to generate a new key.

---

<div class="post-metadata">

**Author:** ![vasas](https://avatars.discourse-cdn.com/v4/letter/v/82dd89/32.png) [@vasas](https://developer.sailpoint.com/discuss/u/vasas)\
**Post date:** [October 12, 2024, 3:52am UTC](https://developer.sailpoint.com/discuss/t/is-default-encryption-key-provided-by-sailpoint-random-for-example-can-sailpoint-employees-anyone-with-their-default-sailpoint-key-decrypt-my-cipher-text-encrypted-using-my-default-key/85225/4 "2024-10-12T03:52:07Z")

</div>

Thanks Paul for the info.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [December 11, 2024, 3:52am UTC](https://developer.sailpoint.com/discuss/t/is-default-encryption-key-provided-by-sailpoint-random-for-example-can-sailpoint-employees-anyone-with-their-default-sailpoint-key-decrypt-my-cipher-text-encrypted-using-my-default-key/85225/5 "2024-12-11T03:52:58Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.