Securely store and manage private keys

Key Management provides programmable, hardware-backed private key management infrastructure for crypto and other sensitive systems. It allows you to securely store, access, and manage private keys and cryptographic material inside secure enclaves, with policy enforcement and authentication gating every operation, functioning as a modern key management service.

Key Management allows you to protect and recover any cryptographic material, including private keys, wallet mnemonics, API secrets, application secrets, and other sensitive credentials used across crypto and backend systems. Whether you're recovering funds after a security incident, migrating from another provider, or protecting sensitive data, Turnkey provides a secure, auditable path without exposing key material to anyone.

No. Private key management happens entirely inside secure enclaves. Key material is never exposed to Turnkey, your application, or any third party.

Private keys are generated and stored inside AWS Nitro Enclaves, where they remain isolated from external systems. Turnkey never stores unencrypted key material.


In transit, HPKE-based secure channels ensure that any movement of encrypted data or key material remains protected end-to-end. Access is gated through authentication methods such as passkeys, OAuth, or API keys, combined with policy enforcement like multi-party approval and scoped permissions.

Yes. Key Management supports secure key import, allowing you to bring existing crypto wallets and private keys into Turnkey’s enclave-based infrastructure without exposing them.

Yes. You can export private keys, like encryption keys, through policy-controlled workflows. Key Management enforces authentication and approval requirements before any export occurs, ensuring secure handling of sensitive crypto assets.

Key Management supports API keys, passkeys, OAuth, and OTP. These authentication methods can be combined with policies to enforce strong access control for private key management.