You can mask a field’s contents by replacing the characters with unreadable results. For example, Blake becomes gB1ff95-$. Or you can convert a field into readable values that are unrelated to the original value.
...
The pattern must follow the following rules:
- %c = replace with lower-case letter (a-z)
- %C = replace with upper-case letter (A-Z)
- %d = replace with digit (0-9)
- %% = replace with % sign.
- %nd or %nc = replace with “n” number of digits or characters.
How does data mask work in Salesforce?
Data Mask is built entirely on the Salesforce platform, so your data is kept in Salesforce at all times. Because Data Mask uses the field definitions in metadata to optimize the mask processes, the underlying algorithms are fast and efficient.
What happens when I Mark Fields for deletion in data mask?
When you mark fields for deletion, Data Mask transforms sensitive, readable sandbox data into empty sets. For example, suppose that you delete the Manager Feedback free-form text field on a custom object.
How does data mask work with sandbox data?
As the sandbox data is masked, previously determined objects and fields undergo a transformation from sensitive, readable sandbox data to obfuscated data. When you mark fields for replacement using random characters, Data Mask transforms sensitive, readable sandbox data into random data.
How does data mask handle random data?
When you mark fields for replacement using random characters, Data Mask transforms sensitive, readable sandbox data into random data.
How do you mask a field?
Configuring masked fieldsSelect the Data fields tab (left hand side of the screen in the new Authoring environment)Drag and drop a Text field to place it where needed.Double click the Text field to bring up the field properties.Check the Masked field data checkbox.More items...•
What is field masking Salesforce?
You then run the masking process from any sandbox created from the production org. The masking process lets you mask some or all sensitive data and ensures that the data is not replicated in a readable or recognizable way into another environment.
How do I mask a text field in Salesforce?
0:384:13Textbox field mask and use mask value functionality - YouTubeYouTubeStart of suggested clipEnd of suggested clipA - and three numbers so the format would be something like this a pay - and then so now if it isMoreA - and three numbers so the format would be something like this a pay - and then so now if it is capturing a code or something you would type in NN. One two three.
How do I enable data masking in Salesforce?
You can configure the masking process in one of two ways....Or, configure the masking process in an existing sandbox.To create a masking configuration and select which data to mask, go to the App Launcher and click the Data Mask app. ... On the Home tab, select an option: ... Give or change the mask Name and Description.
How do you mask data?
Here are a few common data masking techniques you can use to protect sensitive data within your datasets.Data Pseudonymization. Lets you switch an original data set, such as a name or an e-mail, with a pseudonym or an alias. ... Data Anonymization. ... Lookup substitution. ... Encryption. ... Redaction. ... Averaging. ... Shuffling. ... Date Switching.
Does Salesforce shield mask data?
4:366:32Salesforce Shield & Data Mask - YouTubeYouTubeStart of suggested clipEnd of suggested clipQuality data without exposing pii or customer information with data mask you can easily buildMoreQuality data without exposing pii or customer information with data mask you can easily build policies that obfuscate sensitive data in a permanent. Way so that you no longer have to worry about pii.
How do you mask a phone number in LWC?
Add the handlePhoneInputMask() function to the LWC JavaScript file. Set a variable to the input value. The regex on Line #10 replaces any character that's not a digit (you could also use [^0-9]) as it is being typed into the field.
Is Salesforce Data Mask free?
Greatly appreciate the effort and time spent on this brilliant idea and delivery of Salesforce Data Mask which secure sensitive data in sandboxes. However I came to know that the feature is licensed based, rather than free.
How do I mask a phone number in Salesforce?
Data Mask appends the record ID to make the masked fields unique....The pattern must follow the following rules:%c = replace with lower-case letter (a-z)%C = replace with upper-case letter (A-Z)%d = replace with digit (0-9)%% = replace with % sign.%nd or %nc = replace with “n” number of digits or characters.
What is Salesforce shield?
Salesforce Shield is a trio of security tools that helps you build extra levels of trust, compliance, and governance right into your business-critical apps. It includes Shield Platform Encryption, Event Monitoring, and Field Audit Trail.
What is data mask?
Data Mask uses platform-native obfuscation technology to mask sensitive data in any full or partial sandboxes. You can configure different levels of masking, depending on the sensitivity of the data.
What is data obfuscation?
Data obfuscation is a way to modify and ensure privacy protection for PI and PII data. You can mask a field’s contents by replacing the characters with unreadable results. For example, Blake becomes gB1ff95-$. Or you can convert a field into readable values that are unrelated to the original value. For example, Kelsey becomes Amber.
Can you replace sensitive data in a sandbox?
You can replace sensitive data in your sandboxes with random characters, with similarly mapped words, or eliminate it. With Data Mask, customers don’t concede the rights and privileges associated with the privacy and confidentiality of production data when it’s replicated in a sandbox.
Is field type the same as data type?
The field types remain the same , so any business processes that rely on specific data types function normally. You can also recognize the type of data and make informed decisions from the random data. Any sensitive information in the production environment remains confidential.
Can you unmask a sandbox?
Once your sandbox data is masked, you can’t unmask it. This process does not affect your production data, so if you change your mind, you can always refresh the data from production and create a new sandbox org. After you configure Data Mask, you can mask data sets as often as needed. As the sandbox data is masked, ...
What is the default behavior for hiding and exposing masked fields?
The default behavior for hiding and exposing masked fields is based on when a field has focus. If a masked field has focus, it is exposed (and screen sharing halts), and when it does not have focus, it is hidden.
Can you hide a masked view?
If you're planning on manually exposing and hiding a masked view, it can be confusing to have the default behavior based on focus active at the same time. This situation results in a visible masked view regardless of whether it has focus or if it has been manually exposed.
Masking Data to Protect Personal Information in Salesforce (Part 2)
Part 1 of this series covered why you might want to think about data masking and techniques for implementing it. In part II, we show you how to mask data in Salesforce and provide tips for getting your project started.
How to Mask Your Data in Salesforce
With data masking, you have two fundamental options: build it yourself or buy an off-the-shelf solution to do it for you.
Build it yourself
If your needs are simple and straightforward, and you have development resources available, the self-build options could be worth considering.
Buy an off-the-shelf solution
With any product you’re considering, check how and when it applies transformations to your data.
Best practices
No matter which technical solution you choose to mask your data, here are some best practices to consider when setting up your processes:
Next Steps
If you’re using real, production data in your development and testing processes, it’s probably time to speak to your information security and compliance teams. Consider these questions to kick the conversation off:
About the author
Richard Booth is a Customer Success Architect at Salesforce.org in EMEA. He helps nonprofit and higher education organizations make the best possible use of Salesforce technologies to deliver impact and support their mission. You can connect with Richard on LinkedIn.
