---
schema_version: "1"
id: c0fcbff60ff957ed7150078e190c6bb4f96f4f44133e163652adf6c7de0c22da
title: Create Encryption Keys for Field-Level Encryption
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_overview_implement_field_level_encryption.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_overview_implement_field_level_encryption.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 6a12c26fdf9781fff6ac8af13c7e68f7640ea23e82c4d142359c4c5ce24b4e51
description: Field-level encryption adds an extra layer of protection to the customer data in your data extensions. Using field-level encryption requires purchasing Marketing Cloud Engagement Professional Services to configure the necessary changes to your account. To use field-level encryption in your data extensions, complete these prerequisites.
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# Create Encryption Keys for Field-Level Encryption

Field-level encryption adds an extra layer of protection to the customer data in your data extensions. Using field-level encryption requires purchasing Marketing Cloud Engagement Professional Services to configure the necessary changes to your account. To use field-level encryption in your data extensions, complete these prerequisites.

1. From Setup, in the Quick Find box, enter Data Management, and then select **Key Management**.
2. Click **Create**.
3. Under Key Type, select **Symmetric**.
4. Generate a key value by using a cryptographically secure random number generator.
    
    Marketing Cloud Engagement supports AES 256 encryption. Use a 64-character hexadecimal string for the key.
5. Enter the pre-shared key, and save the key.
6. On the Key Management page, click **Create**.
7. Under Key Type, select **Initialization Vector**.
8. For IV, enter a 32-character hexadecimal string, and save the IV.

After you create the symmetric key and IV, send their IDs to your Professional Services associate or account executive so that they can complete the configuration steps for your account.

When the setup process is complete, you can [create data extensions](https://help.salesforce.com/s/articleView?id=mktg.mc_cab_create_a_new_data_extension.htm&language=en_US) in your account and specify which data extension fields to encrypt.

If you activate this feature in an existing account, you must re-create any data extensions that you want to use field-level encryption in. After you migrate your customer data from an old data extension to a data extension that use field-level encryption, delete the old data extension.