I have enabled Salesforce Shield in a developer org of mine, checked "Encrypted" in the custom field definition detail, and proceeded to update a record with a new value in the encrypted field.
I then attempted to login to Salesforce with another user, one that does not have "View Encrypted Data" permission enabled but can see see the field values that should be encrypted.
Can anyone explain why this may be?
I ran the Encryption Statistics and can see that 1 record has been encrypted (my test record), so it has definitely been encrypted. I've double checked that the second logged in users Profile doesn't have "View Encrypted Data" and there are no additional permission sets assigned to the account.