i faced this question in 401 certification exam. Please tell me the correct answer for this? Which profile can view encrypted fields by default ?
By Default no profile can see Encrypted Data.
Only those profile which has “View Encrypted Data” permission can see encrypted fields and by default this permission is not given to any profile. You have to active this permission in profile by checking “View Encrypted Data” check box .
For more detail See this link Encrypted Field Details
Here is the official document confirming only profile that has view encrypted field has permission to view
There is a blog from force guru also helpful as reference on this topic