Rotation of Root token

Is it worth to rotate the root tokens in vault or should we create multiple root tokens for different stakeholders likewise unseal shamir-keys?

please suggest.

Generally speaking we don’t recommend having any live root tokens ever except when they’re specifically being used. See https://www.vaultproject.io/docs/concepts/tokens.html#root-tokens

1 Like