Set Masking Rules

Set masking rules for standard and custom objects in your sandbox org.

Required Editions

Available in: Lightning Experience

Available in: Professional, Enterprise, Unlimited, and Developer Editions with the Salesforce Data Mask managed package (Legacy) add-on license.

Note This content relates to the Data Mask managed package. Read about Accelerate and Anonymize in Own from Salesforce.

A user must have view access on objects to configure masking and modify access on objects and related fields to mask. A particular field may not be available for masking because of its type (currently picklist, formula, checkbox, and roll-up summary are not supported). External objects, platform events, and BigObjects are not supported.

Important Choose the objects and the masking type to apply to its fields carefully. The choices that you make determine the speed of data mask completion.

The following masking types are available:

Masking Type	Description	Supported Field Types
Replace with Random Characters	Replaces sensitive data with random characters that are readable, but not recognizable. For date fields, specify earliest and latest dates.	Text, Short Text, Phone, Date, Email, Fax, Date/Time, Address, URL
Replace with Random Value	Replaces sensitive data with random numbers that are readable, but not recognizable. Specify minimum and maximum values for the field.	Percent, Number, Currency, Geolocation
Replace all with True/False	Replaces all boolean checkbox data with either True or False	Checkbox
Replace From Library	Replaces sensitive data with random but recognizable data using one of these selected libraries: First Name Last Name Company Name Email Street City Country Country (Abbr.) State Postal Code Phone Number Social Security Number	Text, Short Text, Email, Address
Replace using Pattern	Replaces sensitive data with data generated using a defined pattern. The pattern must follow the following rules: %c = replace with lower-case letter (a-z) %C = replace with upper-case letter (A-Z) %d = replace with digit (0-9) %% = replace with % sign %nd or %nc = replace with “n” number of digits or characters	Text, Email, Address
Delete	Deletes sensitive data entirely, leaving an empty data set	Text, Phone, Date, Long Text Area, Email, Fax, Date/Time, Geolocation, Address, Percent, Number, Currency, URL This rule is not available for required fields, and is the only masking option available for long text fields which can hold a large amount of data, and masking them would slow down the masking process considerably.