Key Rotation

Key rotation lets you change your master encryption keys while keeping access to all your existing photos.

When to rotate

Rotate your keys if:

• You suspect your recovery phrase has been seen or compromised.
• You want to follow periodic security best practices.
• You’ve removed someone from a sensitive circle and want extra assurance of forward secrecy.

How to rotate

1. Go to Settings.
2. Find the Security section.
3. Tap Rotate Encryption Keys.
4. You’ll be given a new recovery phrase.

Write it down

Your new recovery phrase replaces the old one — the old phrase will no longer work for recovery. Store it securely, just as you did the original.

What happens behind the scenes

When you rotate keys, BrightBlur re-wraps your person and circle keys with the new master key. This happens in your browser — the server never sees any plaintext key material. Your existing photos remain accessible because the content encryption keys are re-wrapped, not regenerated.