Loading
Salesforce Enforces New Security Requirements in Summer 2026Read More
Set Up and Maintain Your Salesforce Organization
Database Encryption

You are here:

  1. Salesforce Help
  2. Docs
  3. Set Up and Maintain Your Salesforce Organization

Database Encryption

Database Encryption is available to all Hyperforce customers with a Shield or Shield Platform Encryption license. You can encrypt most of your data without impeding filtering, sorting, or impeding the many Salesforce features that rely on sorting and filtering. Because most of your data is encrypted by default with a tenant-specific key, Database Encryption helps you meet your compliance and regulatory requirements with minimal effort.

Required Editions

Available in both Lightning Experience and Salesforce Classic (not available in all orgs).
Available in: Enterprise, Performance, Unlimited and Developer Editions. Requires purchasing Salesforce Shield or Shield Platform Encryption.
Note
Note This page is about Shield Platform Encryption, not Classic Encryption. What's the difference?

Shield Platform Encryption offers field-level encryption (FLE) at the app tier before storing data in the database. However, FLE has known limitations depending on the encryption scheme you choose. While deterministic encryption for FLE allows for operations like sorting, filtering (for exact matches), and grouping on encrypted data, probabilistic encryption generally restricts these operations. These limitations, especially for probabilistic encryption, can sometimes be less than optimal compared to operations on unencrypted data or on data encrypted solely with Database Encryption.

Use Database Encryption on its own, or in conjunction with other Shield Platform Encryption features that use their own key material, such as FLE, Search Index Encryption, Chatter encryption, and more. When you use these features together, Database Encryption is applied after the feature encryption.

See Also

 
Loading
Salesforce Help | Article