Salesforce Shield Platform Encryption: How to Change the Encryption Scheme on a Field

To change the encryption scheme on a field in Salesforce Shield Platform Encryption, follow the steps below for standard fields and custom fields respectively. Ensure the required encryption key type exists in your org before making changes.

Before You Begin

Verify that an encryption key of the required type has been created in your org. For example, if you want to encrypt a field deterministically, a deterministic encryption key must exist before you can select that scheme. Without the correct key type, the desired encryption scheme will not be available as an option.

Change the Encryption Scheme on a Standard Field

1. In Setup, navigate to Encryption Settings.
2. Click Encrypt Standard Fields.
3. Locate the desired standard field and update the encryption scheme to the desired type.
4. Save your changes.

Change the Encryption Scheme on a Custom Field

1. In Setup, navigate to Object Manager and open the relevant object.
2. Click Fields & Relationships and locate the custom field.
3. Click Edit.
4. Under the Encrypted checkbox, select the desired encryption scheme from the available options.
5. Save your changes.