What is data masking in Salesforce?

What is data masking in Salesforce?

Use the Salesforce Data Mask managed package to secure sensitive data in sandbox orgs.

How do I mask a field in Salesforce?

Follow the steps to create a new masking configuration:

1. From the list of all standard and custom objects in your production org, select any objects that contain sensitive data that you want to mask.
2. For each selected object, configure the masking rules for each of its fields.
3. Click Save.

How do I mask data in Salesforce sandbox?

Run the Data Mask in Your Sandbox When configuration is complete, you can start to mask your sandbox data. Run the mask each time you want to replace or delete the data in your sandbox. From the Data Mask Home tab of your sandbox, click the dropdown arrow for the masking configuration you want and select Run.

What is classic encryption?

Salesforce Classic Encryption protects data from your existing Salesforce users by providing masking capabilities, which allow you to hide the original data with random characters. This out-of-the-box functionality can be used to encrypt custom fields with 128-bit Advanced Encryption Standard (AES).

How is sensitive data protected in a sandbox?

Full and partial Sandboxes mirror Production orgs enabling teams to build and test quickly. While access to Production is regulated and controlled, access to sandboxes tends to be flexible as many companies deploy employees and contractors to test applications. And that opens up potential risk when sensitive data in sandboxes is not protected.

How does a data mask work in Salesforce?

Data mask secures sensitive sandbox data using a fully platform-native approach without taking data out of Salesforce. Data is masked through methods such as Anonymization — or making the data anonymous — scrambles a field’s contents into unreadable results. For example, Blake becomes gB1ff95-$.

Why is it important to use data mask?

Server-side pre-processing of the masked data helps with scale issues seen by large organizations. This feature removes the need for users to keep a browser window open while running Data Mask, as well as increased speed allowing multiple objects to pre-process in parallel.

How does pattern based masking protect your data?

Pattern-based masking allows the user to create and generate a masking configuration that is a combination of random characters, letters and digits with a limit of up to 20 characters. Server-side pre-processing of the masked data helps with scale issues seen by large organizations.