Salesforce Security Guide

Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
Give Users Access to Data
Share Objects and Fields
Protect Your Salesforce Data with Shield Platform Encryption
Encrypt Fields and Files
Encrypt Fields
Encrypt Files
Fix Blockers
Manage Shield Platform Encryption Secrets and Keys
How Encryption Works
Encryption Best Practices
Encryption Trade-Offs
Monitoring Your Organization's Security
Security Tips for Apex and Visualforce Development
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Encrypt Fields

Select the fields you want to encrypt. When a field is encrypted, its value is masked for users who don’t have permission to view encrypted data.
Available as add-on subscription in: Enterprise, Performance, and Unlimited Editions. Requires purchasing Salesforce Shield. Available in Developer Edition at no charge for organizations created in Summer ’15 and later.
Available in both Salesforce Classic and Lightning Experience.

User Permissions Needed
To view setup: “View Setup and Configuration”
To encrypt fields: “Customize Application”

Depending on the size of your organization, enabling a standard field for encryption can take a few minutes.

  1. Make sure that your organization has an active encryption key. If you’re not sure, check with your administrator.
  2. From Setup, use the Quick Find box to find the Platform Encryption setup page.
  3. Click Encrypt Fields.
  4. Click Edit.
  5. Select the fields you want to encrypt, and save your settings.
The automatic Platform Encryption validation service will now check for settings in your organization that might block encryption. You’ll receive an email with suggestions for fixing any incompatible settings.
Field values are automatically encrypted only in records created or updated after you’ve enabled encryption. Salesforce recommends updating existing records to ensure that their field values are encrypted. For example, if you encrypt the Description field on the Case object, use the Data Loader to update all case records. Contact Salesforce if you need help with this.

This page is about Shield Platform Encryption, not Classic Encryption.

Note