Loading
Salesforce Enforces New Security Requirements in Summer 2026Read More
Set Up and Maintain Your Salesforce Organization
Tradeoffs and Limitations of Shield Platform Encryption

Tradeoffs and Limitations of Shield Platform Encryption

A security solution as powerful as Shield Platform Encryption doesn’t come without some tradeoffs. When your data is encrypted, it’s possible that some of your users experience limited functionality, and sometimes certain features aren’t available to them at all. As you design your encryption strategy, consider the impact on your users and your overall business solution.

Required Editions

Available in both Salesforce Classic (not available in all orgs) and Lightning Experience.
Available in: Enterprise, Performance, and Unlimited Editions with the Salesforce Shield or Shield Platform Encryption licenses.
Available for free in Developer Edition.
Note
Note This content relates to Shield Platform Encryption. Read about implementing field-level encryption using Shield Extension in Own from Salesforce.
  • General Shield Platform Encryption Considerations
    These considerations apply to all data that you encrypt by using Shield Platform Encryption.
  • Shield Platform Encryption and the Lightning Experience
    Shield Platform Encryption works the same way in the Lightning Experience as it does in Salesforce Classic, with a few minor exceptions.
  • Field Limits with Shield Platform Encryption
    It’s good practice to use validation rules to enforce these field limits. In addition, because encrypted content is often longer than its ciphertext, encrypting a field can impose further limits on the values that you store in that field. Therefore, test your field limits in longer fields, such as Address and Subject, and on any encrypted field that contains non-ASCII values such as Chinese, Japanese, or Korean-encoded data.
  • Which Salesforce Apps Don’t Support Shield Platform Encryption?
    Some Salesforce features work as expected when you work with data that’s encrypted with Shield Platform Encryption. Others don’t. When FLE is used in addition to Database Encryption. Standard Shield Platform Encryption limitations apply.
 
Loading
Salesforce Help | Article