| # swarm unlock-key | |
| <!---MARKER_GEN_START--> | |
| Manage the unlock key | |
| ### Options | |
| | Name | Type | Default | Description | | |
| |:------------------------------------|:-------|:--------|:-------------------| | |
| | [`-q`](#quiet), [`--quiet`](#quiet) | `bool` | | Only display token | | |
| | [`--rotate`](#rotate) | `bool` | | Rotate unlock key | | |
| <!---MARKER_GEN_END--> | |
| ## Description | |
| An unlock key is a secret key needed to unlock a manager after its Docker daemon | |
| restarts. These keys are only used when the autolock feature is enabled for the | |
| swarm. | |
| You can view or rotate the unlock key using `swarm unlock-key`. To view the key, | |
| run the `docker swarm unlock-key` command without any arguments: | |
| > [!NOTE] | |
| > This is a cluster management command, and must be executed on a swarm | |
| > manager node. To learn about managers and workers, refer to the | |
| > [Swarm mode section](https://docs.docker.com/engine/swarm/) in the | |
| > documentation. | |
| ## Examples | |
| ```console | |
| $ docker swarm unlock-key | |
| To unlock a swarm manager after it restarts, run the `docker swarm unlock` | |
| command and provide the following key: | |
| SWMKEY-1-aabbccdd00112233aabbccdd00112233aabbccdd00112233aa-aabbccdd00112233... | |
| Remember to store this key in a password manager, since without it you | |
| will not be able to restart the manager. | |
| ``` | |
| Use the `--rotate` flag to rotate the unlock key to a new, randomly-generated | |
| key: | |
| ```console | |
| $ docker swarm unlock-key --rotate | |
| Successfully rotated manager unlock key. | |
| To unlock a swarm manager after it restarts, run the `docker swarm unlock` | |
| command and provide the following key: | |
| SWMKEY-1-aabbccdd00112233aabbccdd00112233aabbccdd00112233aa-aabbccdd00112233... | |
| Remember to store this key in a password manager, since without it you | |
| will not be able to restart the manager. | |
| ``` | |
| The `-q` (or `--quiet`) flag only prints the key: | |
| ```console | |
| $ docker swarm unlock-key -q | |
| SWMKEY-1-aabbccdd00112233aabbccdd00112233aabbccdd00112233aa-aabbccdd00112233... | |
| ``` | |
| ### <a name="rotate"></a> `--rotate` | |
| This flag rotates the unlock key, replacing it with a new randomly-generated | |
| key. The old unlock key will no longer be accepted. | |
| ### <a name="quiet"></a> `--quiet` | |
| Only print the unlock key, without instructions. | |
| ## Related commands | |
| * [swarm ca](swarm_ca.md) | |
| * [swarm init](swarm_init.md) | |
| * [swarm join](swarm_join.md) | |
| * [swarm join-token](swarm_join-token.md) | |
| * [swarm leave](swarm_leave.md) | |
| * [swarm unlock](swarm_unlock.md) | |
| * [swarm update](swarm_update.md) |