Apply Encryption to Standard Fields in Lightning Experience
You can apply encryption to one or more standard fields at the same time on one or more standard objects by using the Encrypt Standard Fields page. To apply encryption to a standard field on a custom object, a custom field on a standard object, or a custom field on a custom object, do one field at a time.
Required Editions
| Available in both Salesforce Classic (not available in all orgs) and Lightning Experience. |
| Available in: Enterprise, Performance, and Unlimited Editions with the Salesforce Shield or Shield Platform Encryption licenses. |
| Available for free in Developer Edition. |
| User Permissions Needed | |
|---|---|
| To view setup: | View Setup and Configuration |
| To encrypt files: | Customize Application |
Apply Encryption to Multiple Standard Fields at the Same Time
You can configure encryption at rest for multiple standard fields across various standard objects at the same time. Use this procedure only for standard fields on standard objects.
To apply deterministic encryption to a standard field, first turn on deterministic encryption from the Encryption Settings page in Setup.
- Make sure that your org has an active encryption key. If you’re not sure, check with your Salesforce admin.
- From Setup, in the Quick Find box, enter Encryption Settings, and then select Encryption Settings.
-
In the Advanced Encryption Settings section, click Select
Fields.
The Encrypt Standard Fields page shows all standard fields for all standard objects.Note This page shows only standard fields on standard objects. Custom fields on standard objects aren’t listed. Configure encryption for a custom field from its field details page. Also, configure encryption for an eligible field on a custom object from its field details page.
- Click Edit.
-
Select the fields that you want to encrypt.
All new data entered in this field is encrypted. By default, data is encrypted using a probabilistic encryption scheme. To apply deterministic encryption to your data, from the Encryption Scheme list, select Deterministic.
- Save your work.
The automatic Platform Encryption validation service checks for settings in your org that can block encryption. You receive an email with suggestions for fixing incompatible settings. Depending on the size of your org, enabling a standard field for encryption can take a few minutes.
Field values are automatically encrypted only in records created or updated after you’ve enabled encryption. Synchronize existing data with your active key material on the Encryption Statistics and Data Sync page.
Apply Encryption to One Standard Field or One Custom Field
Do these steps any time that you want to configure a standard field on a custom object, a custom field on a standard object, or a custom field on a custom object.
To apply deterministic encryption to a standard or custom field, first turn on deterministic encryption from the Encryption Settings page in Setup.
- From Setup, select Object Manager, and then select your object.
- Click Fields & Relationships.
-
When you create or edit a custom field, select Encrypt the contents of
this field.
By default, data is encrypted using a probabilistic encryption scheme. To apply deterministic encryption to your data, select a deterministic option listed under Advanced Encryption Settings.All new data entered in this field is encrypted.
- Save your work.
The automatic Platform Encryption validation service checks for settings in your org that can block encryption. You receive an email with suggestions for fixing incompatible settings. Depending on the size of your org, enabling a standard field for encryption can take a few minutes.
Field values are automatically encrypted only in records created or updated after you’ve enabled encryption. Synchronize existing data with your active key material on the Encryption Statistics and Data Sync page.
See Also
