Our possible new customer asks if salesforce uses any strong algorithm encryption for user credentials.

Somebody knows how salesforce stores passwords? Any documentation? I have found nothing.


  • The answer is YES. But I don't think SFDC will be too forthcoming on the actual algorithm for security reasons and instead will simply say that it complies with X, Y and Z security standard. I am sure other are more knowledgeable about this here. Jun 28 '17 at 18:07

I suppose one of these https://trust.salesforce.com/en/compliance/ would cover your requirement at least from business perspective (i.e. without disclosing technical details)


I don't believe any organization that follows data security standards is storing or should be storing user passwords in any form - plain text or encrypted. Password validation can be done by using stored MD5 hashes of the password.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.