How can I mask sensitive data in sandbox?

Question

I want to mask the account name of the account object, so that the user cannot view the account name. How can I do this? Please provide me some suggestions.

I want this type of pattern

Answer 1

You can use SandboxPostCopy interface that allows you run an Apex class as soon as sandbox is refreshed. Use that class to run a batch class that makes your data encrypted.

I have implemented similar for my project you can refer that

public class SanboxRefreshAnononimyser implements Database.Batchable<sObject>,SandboxPostCopy {


  public void runApexClass(SandboxContext context) {

      Database.executeBatch(new SanboxRefreshAnononimyser());

  } 



    public Database.QueryLocator start(Database.BatchableContext BC){ 
           String query='Select id,Name,PersonMobilePhone,PersonMobilePhone from Account';
          return Database.getQueryLocator(query);
   }

    public void execute(Database.BatchableContext BC, List<Account> scope){

        for(Account acc:scope){


            acc.PersonEmail=acc.PersonEmail+'Dummy';


            acc.PersonMobilePhone=acc.PersonMobilePhone+'Dummy';


            acc.Phone=acc.Phone+'78';

            acc.Name = SanboxRefreshAnononimyser.encryptText(acc.Name);




        }
        update scope;  


    }

    public void finish(Database.BatchableContext BC){


    }

    private static String encryptText(String inputText){
        String clearText = 'the quick brown fox jumps over the lazy dog';

        Blob key = Blob.valueOf('123456789012345678901234');
        Blob cipherText = Crypto.encryptWithManagedIV('AES192', key, Blob.valueOf(inputText));
        String encodedCipherText = EncodingUtil.base64Encode(cipherText); 
        return encodedCipherText
    }
}

Src: https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_interface_System_SandboxPostCopy.htm

That being said, if you have already refresh the sandbox, you can directly run this batch class in Apex to get it through.

 Database.executeBatch(new SanboxRefreshAnononimyser());