Apply Encryption to Standard Fields in Salesforce Classic
Applying encryption to multiple standard fields at the same time on one or more standard objects is the same process in Salesforce Classic and Lightning Experience. Applying encryption to a standard field on a custom object, a custom field on a standard object, or a custom field on a custom object, in Salesforce Classic is slightly different from the process in Lightning Experience.
Required Editions
| Available in both Salesforce Classic (not available in all orgs) and Lightning Experience. |
| Available in: Enterprise, Performance, and Unlimited Editions with the Salesforce Shield or Shield Platform Encryption licenses. |
| Available for free in Developer Edition. |
| User Permissions Needed | |
|---|---|
| To view setup: | View Setup and Configuration |
| To encrypt files: | Customize Application |
You can apply encryption to many standard fields at once on one or more standard objects using the Encrypt Standard Fields page. If you need to apply encryption to a custom field on a standard object, or any type of field on a custom object, you do that one field at a time.
Apply Encryption to Multiple Standard Fields at the Same Time
You can configure encryption at rest for multiple standard fields across various standard objects at the same time. Use this procedure only for standard fields on standard objects.
To apply deterministic encryption to a standard fields, first turn on deterministic encryption from the Encryption Settings page in Setup.
- Make sure that your org has an active encryption key. If you’re not sure, check with your Salesforce admin.
- From Setup, in the Quick Find box, enter Encryption Settings, and then select Encryption Settings.
-
In the Advanced Encryption Settings section, click Select
Fields.
The Encrypt Standard Fields page shows all standard fields for all standard objects.
Note This page shows only standard fields on standard objects. Custom fields on standard objects aren’t listed. Configure encryption for a custom field from its field details page. Also, configure encryption for an eligible field on a custom object from its field details page. - Click Edit.
-
Select the fields that you want to encrypt.
By default, data is encrypted using a probabilistic encryption scheme. To apply deterministic encryption to your data, from the Encryption Scheme list, select Deterministic.All new data entered in this field is encrypted.
- Save your work.
The automatic Platform Encryption validation service checks for settings in your org that can block encryption. You receive an email with suggestions for fixing incompatible settings. Depending on the size of your org, enabling a standard field for encryption can take a few minutes.
Field values are automatically encrypted only in records created or updated after you’ve enabled encryption. Synchronize existing data with your active key material on the Encryption Statistics and Data Sync page.
Apply Encryption to One Standard Field or One Custom Field
Do these steps any time that you want to configure only one field for encryption. This includes a standard field on a custom object, a custom field on a standard object, or a custom field on a custom object.
To apply deterministic encryption to a standard or custom field, first turn on deterministic encryption from the Encryption Settings page in Setup.
- From the management settings for the object, go to Fields.
-
In the Custom Fields & Relationships section, create a field or edit an existing
one.
If encryption is available for the field, the Encrypt contents of this field checkbox appears.
-
Select Encrypt the contents of this field.
By default, data is encrypted using a probabilistic encryption scheme. To apply deterministic encryption to your data, select a deterministic option listed under Advanced Encryption Settings.All new data entered in this field is encrypted.
- Save your work.
The automatic Platform Encryption validation service checks for settings in your org that can block encryption. You receive an email with suggestions for fixing incompatible settings. Depending on the size of your org, enabling a standard field for encryption can take a few minutes.
Field values are automatically encrypted only in records created or updated after you’ve enabled encryption. Synchronize existing data with your active key material on the Encryption Statistics and Data Sync page.
See Also

