Salesforce Security Guide

Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
Give Users Access to Data
Share Objects and Fields
Platform Encryption
Encrypt Fields and Files
Set Up Platform Encryption
How It Works
Encryption Considerations
Encryptable Fields
Terminology
Encryption Flow
Validation
Permissions
Visibility
Deployment
Sandbox
Classic Encryption
Monitoring Your Organization's Security
Security Tips for Apex and Visualforce Development
PDF

Newer Version Available

This content describes an older version of this product. View Latest

What’s the Difference Between Classic Encryption and Platform Encryption?

Classic encryption lets you protect a special type of custom text fields, which you create for that purpose. With Platform Encryption you can encrypt a variety of widely-used standard fields, along with some custom fields and many kinds of files. Platform Encryption also supports person accounts, cases, search, workflow, approval processes, and other key Salesforce features.
Available as add-on subscription in: Enterprise, Performance, and Unlimited Editions. Available in Developer Edition at no charge for organizations created in Summer ’15 and later.
Available in Salesforce Classic.

Feature Classic Encryption Platform Encryption
Pricing Included in base user license Additional fee applies
Encryption at Rest Checkmark Checkmark
Native Solution (No Hardware or Software Required) Checkmark Checkmark
Encryption Algorithm 128-bit Advanced Encryption Standard (AES) 256-bit Advanced Encryption Standard (AES)
HSM-based Key Derivation Checkmark
“Manage Encryption Keys” Permission Checkmark
Generate, Export, Import, and Destroy Keys Checkmark Checkmark
PCI-DSS L1 Compliance Checkmark Checkmark

(for fields only)
Text (Encrypted) Field Type

Dedicated custom field type, limited to 175 characters
Masking Checkmark Checkmark
Mask Types and Characters Checkmark
“View Encrypted Data” Permission Required to Read Encrypted Field Values Checkmark Checkmark
Email Template Values Respect “View Encrypted Data” Permission Checkmark
Encrypted Standard Fields Checkmark
Encrypted Attachments, Files, and Content Checkmark
Encrypted Custom Fields Checkmark
Encrypt Existing Fields for Supported Custom Field Types Checkmark
Search (UI, Partial Search, Lookups, Certain SOSL Queries) Checkmark
API Access Checkmark Checkmark
Available in Workflow Rules and Workflow Field Updates Checkmark
Available in Approval Process Entry Criteria and Approval Step Criteria Checkmark