2

If I encrypt fields with the Platform Shield Encryption, but still see the fields when I'm a different user how can I test to see if the encryption is working?

I understand it encrypts at rest so I created a new account after setting the fields I wanted to be encrypted.

Can all users in my org see the encrypted data? Is it only people that some how break into my org that will see encrypted data?

I just want to be able to test out how things look when using the shield platform encryption on certain objects or when doing SOQL/SOSL.

Improve this question
2

2 Answers 2

Reset to default
1

The other thing is the setup gives you insight about the statistics around how much data is encrypted. https://developer.salesforce.com/docs/atlas.en-us.securityImplGuide.meta/securityImplGuide/security_pe_stats_gather.htm

The actual way is as Shane mentioned to destroy your key, this is something you should not do in your prod org but you can in a sandbox if you need to be convinced :)

Improve this answer
1
  • Thanks, this is actually the approach I'm doing after speaking with my group, but I appreciate the workbench approach because I learned something new! -- we might even consider the crazy key deleting approach on smaller sample :P
    – Cara Cini
    Commented Nov 7, 2018 at 18:16
2

Good question!

One quick way to do it is to look at the field in Workbench. You should see it listed as "encrypted: true".

If you're looking for a more definitive "prove-it-to-me" test, you could (BACKUP and then) delete the encryption key, though I'd be a little too timid to try that! If you went that route, you wouldn't be able to see any of the values in the encrypted fields. You could then restore the key from backup, and see everything just fine...but, again, there's no way I would try that! Have a little faith in the Salesforce peoples!

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .