> ## Documentation Index
> Fetch the complete documentation index at: https://turnkey-0e7c1f5b-ip-allowlisting.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview

Turnkey provides enterprise-grade key management infrastructure built on [secure enclaves](/security/secure-enclaves). Store, recover, and manage cryptographic keys with programmable access controls, quorum approvals, and end-to-end encryption.

With Key Management, you can:

* Securely store cryptographic keys in hardware-backed secure enclaves
* Implement disaster recovery with cryptographic guarantees
* Protect sensitive material like API secrets, credentials, and recovery bundles

## Secure Enclaves

At the foundation of Key Management is Turnkey's [secure enclave infrastructure](/security/secure-enclaves). Keys are generated and stored inside hardware-backed enclaves, and key material never exists in plaintext outside the enclave boundary.

## What can you build?

| Example                                                                           | Description                                                                                                                                              |
| :-------------------------------------------------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Enterprise Disaster Recovery                                                      | Recover wallets and cryptographic material when incidents occur or credentials are compromised                                                           |
| [Encryption Key Storage](/products/key-management/examples/encryption-key-escrow) | Use Turnkey as a secure key storage and retrieval service to build user-controlled recovery with risk separation between your infrastructure and Turnkey |

## Other use cases

### Secrets management

Store encryption keys in Turnkey that protect API secrets, credentials, or other sensitive configuration. Your infrastructure holds the encrypted secrets; Turnkey holds the decryption key.

### Provider migration

Migrate keys from another custody provider into Turnkey's secure enclaves with no plaintext exposure during transit.

## Next Steps

Explore the [code examples](/products/key-management/examples/overview) for detailed implementation guides, or learn more about [secure enclaves](/security/secure-enclaves) and [quorum policies](/concepts/users/root-quorum).