Ask Search:
Tracy DunleaveyTracy Dunleavey 

SSN Field Encryption and shield

Currently the SSN  field is encrypted, but now that we have shield turned on, we would like to know if that field encryption uses the 128 bit or 256 bit encryption?  Would a  managed package locked down field prevent the 256 bit encryption?
Best Answer chosen by Tracy Dunleavey
Matt GraderMatt Grader
Hi Tracy.  Shield Platform encryption is by default 256 bit encryption.  The older classic encryption was 128 bit.
You should be able to encrypt a managed package field as long as it is one of the valid encryptable field types.   Please note you should check with the author of the package to verify they support encyption and it will not break any features of the package.    https://releasenotes.docs.salesforce.com/en-us/summer16/release-notes/rn_security_pe_packages.htm

All Answers

Matt GraderMatt Grader
Hi Tracy.  Shield Platform encryption is by default 256 bit encryption.  The older classic encryption was 128 bit.
You should be able to encrypt a managed package field as long as it is one of the valid encryptable field types.   Please note you should check with the author of the package to verify they support encyption and it will not break any features of the package.    https://releasenotes.docs.salesforce.com/en-us/summer16/release-notes/rn_security_pe_packages.htm
This was selected as the best answer
Tracy DunleaveyTracy Dunleavey
Great Thank you very much
Devin BushwellerDevin Bushweller
Hi Tracy. Matt made some great points!

In addition please note the following:
 
1. In order to encrypt fields that are part of a managed package using Shield Platform Encryption, you will need to have Salesforce enable that feature for your Org.

2. If the existing SSN field is using classic encryption (e.g. the field is the text encrypted data type) it will still use 128 bit encryption and you can't apply Platform Encryption to it. What most people do is create a new field using Platform Encryption and migrate the data away from the classic encryption field.