Turn On Encryption for Standard and Custom Fields
Encrypt individual fields with Field-Level Encryption (FLE).
Required Editions
| Available in both Salesforce Classic (not available in all orgs) and Lightning Experience. |
| Available in: Enterprise, Performance, and Unlimited Editions with the Salesforce Shield or Shield Platform Encryption licenses. |
| Available for free in Developer Edition. |
| User Permissions Needed | |
|---|---|
| To view setup: | View Setup and Configuration |
| To encrypt files: | Customize Application |
Note This content relates to Shield
Platform Encryption. Read about implementing field-level encryption using Shield Extension
in Own from Salesforce.
Before you begin:
- Analyze the fields that you want to encrypt with the field analyzer. This step is required before you can turn on FLE. The analysis reveals which encryption schemes are available or blocked by other configurations in your org.
When you turn on FLE for a field, the field values in new or modified records are encrypted automatically. To encrypt field values in preexisting records, execute an encryption sync after completing this task.
You can turn on FLE for multiple fields consecutively, but not in a single bulk action. This behavior is designed to encourage a careful and conservative approach when you implement FLE, and to help reduce errors.
To turn on FLE for a field:
- From the App Launcher, find and select Shield.
- Go to the Platform Encryption tab, and then click Field-Level Encryption.
- Under Fields, find the field that you want to encrypt, and then click the dropdown menu.
-
Click Encrypt Field..
Note If the field hasn’t yet been analyzed, or if all encryption schemes are blocked, then this option isn’t available. - Select an encryption scheme, and then click Continue.
- Click Enable Encryption.
Salesforce executes the encryption job in the background. You receive an email when the process completes.
Did this article solve your issue?
Let us know so we can improve!

