Loading
Prepare for Email to Become the Default Login ExperienceRead More
Manage Users and Data Access
Configure Independent Guest Field Masking

You are here:

  1. Salesforce Help
  2. Docs
  3. Manage Users and Data Access

Configure Independent Guest Field Masking

Use field sets to control which user fields guest users can see separately from other external users, such as portal users. With Independent Guest Field Masking, guest users can't see the fields listed in the Guest_PersonalInfo_EPIM field set.

Required Editions

Available in: Salesforce Classic and Lightning Experience
Available in: Enterprise, Performance, Unlimited, and Developer Editions
Applies to: LWR, Aura, and Visualforce sites
User Permissions Needed
To enable Independent Guest Field Masking: Customize Application

After you turn on Independent Guest Field Masking, the existing PersonalInfo_EPIM field set applies only to authenticated external users (portal users), and the new Guest_PersonalInfo_EPIM field set applies to unauthenticated external users (guest users).

For new orgs (Winter '27 and later), if Digital Experiences and Enhanced Personal Information Management are enabled, Independent Guest Field Masking turns on automatically.

Note
Note You can't disable this setting after you enable it. Independent Guest Field Masking is layered on top of Enhanced Personal Information Management, which must remain enabled.
Important
Important The Guest_PersonalInfo_EPIM field set masks more fields by default than the PersonalInfo_EPIM field set. If guest users on your site rely on user fields such as profile photo or banner URLs (FullPhotoUrl, MediumPhotoUrl, SmallPhotoUrl, BannerPhotoUrl, MediumBannerPhotoUrl, SmallBannerPhotoUrl) or fields used by Apex classes, Flows, or UI components, remove those fields from the Guest_PersonalInfo_EPIM field set to avoid breaking those features.

The default masked fields also include lookup fields, such as Account, Contact, and UserRole. When an Apex class, Flow, or component traverses one of these relationships for a guest user, for example, user.UserRole.Name, the masked field returns a null value with no error. If your site depends on this type of relationship traversal, remove the lookup field from the Guest_PersonalInfo_EPIM field set.

Tip
Tip Suppose a guest user sees a null or blank value for a user field that you know contains data. If field-level security for that field is set up correctly, Enhanced Personal Information Management is probably masking the field. To restore the field's visibility for guest users, remove it from the Guest_PersonalInfo_EPIM field set.
  1. From Setup, in the Quick Find box, enter User Management Settings, and then select User Management Settings.
  2. Select Independent Guest Field Masking.
    • New orgs (Winter '27 and later): This setting is already enabled. The Guest_PersonalInfo_EPIM field set contains an expanded set of default masked fields, which includes all custom user fields. Review the field set and remove any fields that guest users need to access.
    • Existing orgs: When you enable this setting, the Guest_PersonalInfo_EPIM field set is initialized as a copy of your existing PersonalInfo_EPIM field set. Your current guest user visibility is preserved. Selectively add fields to Guest_PersonalInfo_EPIM to tighten security.
  3. To customize which fields are concealed from guest users, modify the Guest_PersonalInfo_EPIM field set.

    Add any standard or custom user fields except system fields, formula fields, the Default Currency ISO Code field, and the Information Currency field.

    1. In Object Manager, select User.
    2. Click Field Sets, and then select Guest_PersonalInfo_EPIM.
    3. Add or remove fields from the Guest_PersonalInfo_EPIM field set.
    4. Save your work.

In new orgs, the Guest_PersonalInfo_EPIM field set masks 59 standard fields plus all custom fields on the User entity by default. The field set includes the 30 fields from the original PersonalInfo_EPIM field set, plus these additional fields.

Default Masked Fields for Guest Users
Category Fields
Banner and photo fields BannerPhoto, BannerPhotoUrl, FullPhotoUrl, MediumBannerPhotoUrl, MediumPhotoUrl, SmallBannerPhotoUrl, SmallPhotoUrl, ProfilePhoto, IsProfilePhotoActive
Lookup fields Account, Contact, DelegatedApprover, Individual, Person, Profile, UserRole, CallCenter, Workspace
Name fields MiddleName, Suffix
Locale and preference fields EmailEncodingKey, LanguageLocaleKey, LocaleSidKey, TimeZoneSidKey, DigestFrequency, DefaultGroupNotificationFrequency, DefaultDivision, ForecastEnabled, ReceivesAdminInfoEmails, ReceivesInfoEmails, OutOfOfficeMessage, StartDay, EndDay, SharingType, UserSubtype, IsExtIndicatorVisible, IsSystemControlled
Login fields LastLoginDate, LastLoginMessageDate, LastPasswordChangeDate, PasswordExpirationDate, NumberOfFailedLogins, HasUserVerifiedEmail, HasUserVerifiedPhone, SuAccessExpirationDate
Other fields LastDashboard, LastPricebook, LastReferencedDate, LastTabSet, LastViewedDate, RawCurrentStatus, ChatterAdoptionStage, ChatterAdoptionStageModifiedDate, OfflinePdaTrialExpirationDate, OfflineTrialExpirationDate, WirelessEmail, StayInTouchNote, StayInTouchSignature, StayInTouchSubject
Custom fields All custom fields on the User entity

For the original 30 fields shared with the PersonalInfo_EPIM field set, see Configure Enhanced Personal Information Management Using Field Sets.

See Also

 
Loading
Salesforce Help | Article