Manage Field-Level Encryption from Setup

Note This content relates to Shield Platform Encryption. Read about implementing field-level encryption using Shield Extension in Own from Salesforce.

Note This page is about Shield Platform Encryption, not Classic Encryption. What's the difference?

Shield Platform Encryption supports Field-Level Encryption on standard objects and custom objects. Both standard and custom objects can have standard and custom fields.

After you set up a field for Field-Level Encryption, Shield Platform Encryption begins to encrypt records that are new or that are updated after you enable encryption. To encrypt data that existed before enabling encryption, you can synchronize your existing data with your active key material from the Encryption Statistics and Data Sync page.

There are two ways to configure encryption on object fields. To configure one or more standard fields on any standard object at the same time, you can use the Encrypt Standard Fields page in Setup. To configure encryption for a single standard or custom field, you can also use an object’s field details page.

Because the Encrypt Standard Fields page supports only standard fields on standard objects, it doesn’t include these fields:

• Custom fields on standard objects
• Standard fields on custom objects
• Custom fields on custom objects

To configure these types of fields for encryption, you must use the standard- or custom-object field details. If a field is eligible for encryption, you can apply it there.

• Apply Encryption to Standard Fields in Salesforce Classic
  Applying encryption to multiple standard fields at the same time on one or more standard objects is the same process in Salesforce Classic and Lightning Experience. Applying encryption to a standard field on a custom object, a custom field on a standard object, or a custom field on a custom object, in Salesforce Classic is slightly different from the process in Lightning Experience.
• Apply Encryption to Standard Fields in Lightning Experience
  You can apply encryption to one or more standard fields at the same time on one or more standard objects by using the Encrypt Standard Fields page. To apply encryption to a standard field on a custom object, a custom field on a standard object, or a custom field on a custom object, do one field at a time.
• Encrypt Custom Fields in Installed Managed Packages
  If an installed managed package supports Shield Platform Encryption, you can encrypt custom fields in that package. Turn on encryption for custom fields in installed managed packages from the Encryption Settings page, and then apply encryption to custom fields in your installed managed package.