#Encrypted0 discussing

Hi all

My company has decided to enable encryption, but the process is a bit confusing for me since I haven’t done this before. Has anyone enabled both database-level and field-level encryption? Do we have to enable both? How do you manage your keys and handle backups?

I’m especially concerned about key management — whether it’s better to use the Salesforce-managed keys or go with BYOK. How do you handle key rotation and key backups?

So i'm discovering that I probably shouldn't have declared social security# as an encrypted field, since there surely are restrictions. Anyway, if i wanted to change the field type to unencrypted I realize I cannot do that directly. And the advice is to export that field's data and re-import it into an unencrypted field. Can you just export that field (with its identifying record's ID#) and then import it? Is there a clear procedure laid out for doing this somewhere in the docs?