Abstract: Embodiments of this application disclose a method for secure communication and a device. A local device sends indication information to a peer device, to indicate the peer device to establish a key negotiation template. After establishing a same key negotiation template, the two devices respectively generate corresponding IPSec keys in IPSec aging periods based on the key negotiation template. According to the method provided in this application, each time an IPSec key needs to be negotiated, the IPSec key may be obtained based on the key negotiation template by exchanging a latest public key and indication information of a current IPSec aging period. Even in large-scale networking scenarios such as IoT, IPSec keys corresponding to IPSec aging periods can still be quickly and efficiently obtained, to implement secure communication between devices.