Change the Encryption Scheme for Standard and Custom Fields
After you turn on Field-Level Encryption (FLE) for a field, you can change the encryption scheme at any time.
Required Editions
| Available in both Salesforce Classic (not available in all orgs) and Lightning Experience. |
| Available in: Enterprise, Performance, and Unlimited Editions with the Salesforce Shield or Shield Platform Encryption licenses. |
| Available for free in Developer Edition. |
| User Permissions Needed | |
|---|---|
| To view setup: | View Setup and Configuration |
| To encrypt files: | Customize Application |
Note This content relates to Shield
Platform Encryption. Read about implementing field-level encryption using Shield Extension
in Own from Salesforce.
Before you begin:
- When switching to a new encryption scheme, there are several considerations to be aware of. Understand the process and choose the best configuration for your needs. See Switch Between Probabilistic and Deterministic Encryption.
- If you recently rotated your keys, sync your data before switching to a new encryption scheme. Sync once again after you make the switch, regardless of your last key rotation.
To change a field’s encryption scheme:
- From the App Launcher, find and select Shield.
- Go to the Platform Encryption tab, and then click Field-Level Encryption.
- Under Fields, find the field that you want to change, and then click the dropdown menu.
- Click Change Encryption Scheme.
- Select a new encryption scheme, and then click Change.
- When prompted, confirm the change.
Salesforce executes the encryption job in the background. You receive an email when the process completes.
Did this article solve your issue?
Let us know so we can improve!
