When you select fields or files to encrypt with Shield Platform Encryption,
Salesforce automatically checks for potential side effects. The validation service then
warns you if any existing settings may pose a risk to data access or your normal use of
Salesforce. You have some options for how to clear up these problems.
Required Editions
Available in both Salesforce Classic (not available in all orgs) and Lightning
Experience.
Available in: Enterprise, Performance, and Unlimited
Editions with the Salesforce Shield or Shield Platform Encryption licenses.
Available for free in Developer Edition.
If your results include error messages, you're probably running into one or more of
these limitations:
Portals
You can’t encrypt standard fields, because a legacy customer or partner
portal (created before 2013) is enabled in your organization. To deactivate
a legacy customer portal, go to the Customer Portal Settings page in Setup.
To deactivate a legacy partner portal, go to the Partners page in Setup.
Note Experience Cloud sites aren’t related to this issue. They’re fully
compatible with encryption.
Criteria-Based Sharing Rules
You’ve selected a field that is used in a filter in a criteria-based sharing
rule.
SOQL/SOSL queries
You’ve selected a field that’s either used in an aggregate function in a SOQL query,
or it's a field used in a WHERE, GROUP BY, or ORDER BY clause.
Formula fields
You’ve selected a field that’s referenced by a custom formula field in an
unsupported way. Formulas can use BLANKVALUE, CASE, HYPERLINK, IF, IMAGE,
ISBLANK, ISNULL, NULLVALUE, and concatenation (&). Custom formula fields
can reference encrypted data in Salesforce Classic but not Lightning
Experience or via SOQL.
Flows and Processes
You’ve selected a field that’s used in one of these contexts.
To filter data in a flow
To sort data in a flow
To filter data in a process
To filter data in a record choice set
To sort data in a record choice set
Note By default, your results only list the first 250 errors per
element. You can increase the number of errors listed in your results to
5000. Contact Salesforce for help.
Note This page is about Shield Platform Encryption,
not Classic Encryption. What's the difference?
Did this article solve your issue?
Let us know so we can improve!
Loading
Salesforce Help | Article
Cookie Consent Manager
General Information
Required Cookies
Functional Cookies
Advertising Cookies
General Information
We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required Cookies
Always Active
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional Cookies
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising Cookies
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.