---
schema_version: "1"
id: b33fd498a5b0be87bc4c7115b96e9942f0d95b17ea0eac9dfd85bdeaa63c66d7
title: Platform Encryption Analyzer Tab
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/shield_ext_pe_analyzer.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.shield_ext_pe_analyzer.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 040b5ea4e5d0da06777aaad87b20661b5193d1705aa9b0281a00286985fa36d8
description: Before encrypting fields in an org, find out which ones are compatible with Salesforce Shield Platform Encryption. Encryption helps protect sensitive data by converting it into a format that is unreadable without the appropriate decryption key.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Platform Encryption Analyzer Tab

Before encrypting fields in an org, find out which ones are compatible with Salesforce Shield Platform Encryption. Encryption helps protect sensitive data by converting it into a format that is unreadable without the appropriate decryption key.

- Throughout the Platform Encryption Analyzer, some terms and icons are used consistently.
    - All Clear: Field level encryption can be enabled on these fields with no impact to user functionality in Salesforce. We recommend testing in a sandbox prior to production deployment.
    - Blocked by Configuration: These fields do not comply with the Salesforce rules, but steps can be taken to allow encryption.
    - Blocked by Platform: These fields do not comply with Salesforce rules and cannot be encrypted.
    - Encrypted by Shield: These fields are encrypted by Salesforce Shield Platform Encryption.
        - Standard: These fields are using the standard encryption settings available with Shield Platform Encryption.
        - Filter Preserving: These fields are using the filter preserving encryption settings available with Shield Platform Encryption.
- It is recommended to perform Data Classification prior to analyzing high-risk fields. Once Data Classification has been completed, the next step is to determine which fields require encryption. Use the check box next to each field to analyze it for available encryption options.
- Use the available Filters in the Field Explorer to review fields. Selected fields are displayed until unselected, even if the filters are changed.
- From the Options Menu, visibility can be toggled for "Object Name", "Name", "Developer Name", "Data Type", "Description", "Help Text", "Compliance Categorization", "Fill Rate", "Sensitivity", and "Result".

- **[Analyze Platform Encryption Fields](https://help.salesforce.com/s/articleView?id=platform.shield_ext_analyze_pe_fields.htm&release=264.0.0&type=5)**  
    Determine which fields can be encrypted without affecting other configurations in an org. Prioritize which fields need encryption based on their sensitivity and compliance requirements.
- **[Encrypt Fields with Secure](https://help.salesforce.com/s/articleView?id=platform.shield_ext_encrypt_fields.htm&release=264.0.0&type=5)**  
    Encrypt sensitive fields using the Platform Encryption Analyzer so you can protect your data. Encrypt fields directly from the analysis results, and then confirm the encryption options. You can also exclude fields from encryption, include previously excluded fields, and download a compliance report of the last analysis as a PDF file.
- **[Dynamic SOQL and Secure Platform Encryption](https://help.salesforce.com/s/articleView?id=platform.shield_ext_dynamic_soql_secure.htm&release=264.0.0&type=5)**  
    Dynamic SOQL lets you create SOQL strings at run time within Apex, so you can build more flexible applications. This flexibility is useful in environments where queries are constructed dynamically based on user input or other run time conditions.