---
reference:
  curl:
    - key: decrypt_data_key
      id: decrypt_data_key
      url: /reference/vault/key/decrypt-data-key
      title: /vault/v1/keys/decrypt
      type: POST
      parameters:
        - key: keys
          type: string
          description: (data_key.encrypted_keys)
      returns:
        - key: anonymous
          type: object
          unwrap: true
          properties:
            - key: id
              type: string
              description: (data_key.id)
            - key: data_key
              type: string
              description: (data_key.key)
  js:
    - key: decryptDataKey
      id: decrypt_data_key
      url: /reference/vault/key/decrypt-data-key
      title: vault.decryptDataKey()
      parameters:
        - key: options
          type: object
          unwrap: true
          properties:
            - key: keys
              type: string
              description: (data_key.encrypted_keys)
      returns:
        - key: anonymous
          type: object
          unwrap: true
          properties:
            - key: id
              type: string
              description: (data_key.id)
            - key: key
              type: string
              description: (data_key.key)
  go:
    - key: DecryptDataKey
      id: decrypt_data_key
      url: /reference/vault/key/decrypt-data-key
      title: vault.DecryptDataKey()
      parameters:
        - (ctx)
        - key: opts
          type: vault.DecryptDataKeyOpts
          expanded: true
          properties:
            - key: Keys
              type: string
              description: (data_key.encrypted_keys)
      returns:
        - key: response
          type: vault.DataKey
          unwrap: true
          properties:
            - key: Id
              type: string
              description: (data_key.id)
            - key: Key
              type: string
              description: (data_key.key)
  python:
    - key: decrypt_data_key
      id: decrypt_data_key
      url: /reference/vault/key/decrypt-data-key
      title: vault.decrypt_data_key()
      parameters:
        - key: keys
          type: str
          description: (data_key.encrypted_keys)
      returns:
        - key: data_key
          type: vault.DataKey
          unwrap: true
          properties:
            - key: id
              type: str
              description: (data_key.id)
            - key: key
              type: str
              description: (data_key.key)
originalPath: >-
  .tmp-workos-clone/packages/docs/content/reference/vault/key/decrypt-data-key.mdx
---

## Decrypt a data key

Decrypt a data key that was previously encrypted using WorkOS Vault.

<CodeBlock referenceId="decrypt_data_key">
  <CodeBlockTab title="Request" file="decrypt-data-key-request" />
  <CodeBlockTab title="Response" file="decrypt-data-key-response" />
</CodeBlock>