Self-Service Encryption for Custom Fields in Installed Managed Packages

Salesforce Customer Support is great, but self-service is even better. Now you can turn on the Encrypt Custom Fields for Managed Packages setting for your org right from Setup. No more calls to Support. If the installed managed package supports encryption, you can get right down to the important business of adding extra layers of security to your—and your customers’—data.

Where: This change applies to Salesforce Classic, Lightning Experience, and all versions of the Salesforce app in Enterprise, Performance, Unlimited, and Developer editions.

How: On the Advanced Settings page in Setup, turn on Encrypt Custom Fields in Managed Packages. From now on, if an installed managed package supports encryption, you can encrypt custom fields in that package.


Don’t know if your application supports encrypted fields? Look for the Compatibility with Shield flag in its AppExchange listing. If you don’t see this flag, talk to your app vendor.

If you’ve already had Salesforce enable this feature for you, just opt in again on the Advanced Settings page. If you don’t opt in, your encrypted custom fields in installed managed packages remain encrypted. However, you can’t enable or disable encryption on those fields in your installed managed packages.