---
schema_version: "1"
id: 0db8c1abc89c7682db2155e2be4d4d67e667ee0d02ad2ca7fac15339d0c2c5bc
title: Configure Independent Guest Field Masking
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/users_personal_info_guest_field_sets.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.users_personal_info_guest_field_sets.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: a084fc98bb93e1ae43009ef5d2c7c0ef6e2cb82b26e903ea865c34b6c4183a4f
description: Use field sets to control which user fields guest users can see separately from other external users, such as portal users. With Independent Guest Field Masking, guest users can't see the fields listed in the Guest_PersonalInfo_EPIM field set.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Configure Independent Guest Field Masking

Use field sets to control which user fields guest users can see separately from other external users, such as portal users. With Independent Guest Field Masking, guest users can't see the fields listed in the Guest\_PersonalInfo\_EPIM field set.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Applies to: <a href="https://help.salesforce.com/s/articleView?id=experience.exp_cloud_basics_glossary.htm&amp;type=5&amp;language=en_US" target="_blank">LWR, Aura, and Visualforce sites</a></td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d18518e81">User Permissions
              Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d18518e81 ">To enable Independent Guest Field Masking:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d18518e81 ">Customize Application</td>

          </tr>
        </tbody>
      </table>

After you turn on Independent Guest Field Masking, the existing PersonalInfo\_EPIM field set applies only to authenticated external users (portal users), and the new Guest\_PersonalInfo\_EPIM field set applies to unauthenticated external users (guest users).

For new orgs (Winter '27 and later), if Digital Experiences and Enhanced Personal Information Management are enabled, Independent Guest Field Masking turns on automatically.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_note.png)

Note You can't disable this setting after you enable it. Independent Guest Field Masking is layered on top of Enhanced Personal Information Management, which must remain enabled.

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_important.png)

Important The Guest\_PersonalInfo\_EPIM field set masks more fields by default than the PersonalInfo\_EPIM field set. If guest users on your site rely on user fields such as profile photo or banner URLs (`FullPhotoUrl`, `MediumPhotoUrl`, `SmallPhotoUrl`, `BannerPhotoUrl`, `MediumBannerPhotoUrl`, `SmallBannerPhotoUrl`) or fields used by Apex classes, Flows, or UI components, remove those fields from the Guest\_PersonalInfo\_EPIM field set to avoid breaking those features.

The default masked fields also include lookup fields, such as `Account`, `Contact`, and `UserRole`. When an Apex class, Flow, or component traverses one of these relationships for a guest user, for example, `user.UserRole.Name`, the masked field returns a null value with no error. If your site depends on this type of relationship traversal, remove the lookup field from the Guest\_PersonalInfo\_EPIM field set.

![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_tip.png)

Tip Suppose a guest user sees a null or blank value for a user field that you know contains data. If field-level security for that field is set up correctly, Enhanced Personal Information Management is probably masking the field. To restore the field's visibility for guest users, remove it from the Guest\_PersonalInfo\_EPIM field set.

1. From Setup, in the Quick Find box, enter User Management Settings, and then select **User Management Settings**.
2. Select **Independent Guest Field Masking**.
    
    - **New orgs (Winter '27 and later):** This setting is already enabled. The Guest\_PersonalInfo\_EPIM field set contains an expanded set of default masked fields, which includes all custom user fields. Review the field set and remove any fields that guest users need to access.
    - **Existing orgs:** When you enable this setting, the Guest\_PersonalInfo\_EPIM field set is initialized as a copy of your existing PersonalInfo\_EPIM field set. Your current guest user visibility is preserved. Selectively add fields to Guest\_PersonalInfo\_EPIM to tighten security.
3. To customize which fields are concealed from guest users, modify the Guest\_PersonalInfo\_EPIM field set.
    
    Add any standard or custom user fields except system fields, formula fields, the Default Currency ISO Code field, and the Information Currency field.
    
    1. In Object Manager, select **User**.
    2. Click **Field Sets**, and then select **Guest\_PersonalInfo\_EPIM**.
    3. Add or remove fields from the Guest\_PersonalInfo\_EPIM field set.
    4. Save your work.

In new orgs, the Guest\_PersonalInfo\_EPIM field set masks 59 standard fields plus all custom fields on the User entity by default. The field set includes the 30 fields from the original PersonalInfo\_EPIM field set, plus these additional fields.

Default Masked Fields for Guest Users  
| Category | Fields |
| --- | --- |
| Banner and photo fields | BannerPhoto, BannerPhotoUrl, FullPhotoUrl, MediumBannerPhotoUrl, MediumPhotoUrl, SmallBannerPhotoUrl, SmallPhotoUrl, ProfilePhoto, IsProfilePhotoActive |
| Lookup fields | Account, Contact, DelegatedApprover, Individual, Person, Profile, UserRole, CallCenter, Workspace |
| Name fields | MiddleName, Suffix |
| Locale and preference fields | EmailEncodingKey, LanguageLocaleKey, LocaleSidKey, TimeZoneSidKey, DigestFrequency, DefaultGroupNotificationFrequency, DefaultDivision, ForecastEnabled, ReceivesAdminInfoEmails, ReceivesInfoEmails, OutOfOfficeMessage, StartDay, EndDay, SharingType, UserSubtype, IsExtIndicatorVisible, IsSystemControlled |
| Login fields | LastLoginDate, LastLoginMessageDate, LastPasswordChangeDate, PasswordExpirationDate, NumberOfFailedLogins, HasUserVerifiedEmail, HasUserVerifiedPhone, SuAccessExpirationDate |
| Other fields | LastDashboard, LastPricebook, LastReferencedDate, LastTabSet, LastViewedDate, RawCurrentStatus, ChatterAdoptionStage, ChatterAdoptionStageModifiedDate, OfflinePdaTrialExpirationDate, OfflineTrialExpirationDate, WirelessEmail, StayInTouchNote, StayInTouchSignature, StayInTouchSubject |
| Custom fields | All custom fields on the User entity |

For the original 30 fields shared with the PersonalInfo\_EPIM field set, see [Configure Enhanced Personal Information Management Using Field Sets](https://help.salesforce.com/s/articleView?id=platform.users_personal_info_field_sets.htm&release=264.0.0&type=5 "Enhanced Personal Information Management conceals personal information fields from authenticated external users on Experience Cloud sites. If your org enabled this feature in Spring '22 or later, use the PersonalInfo_EPIM field set to control which user fields are hidden.").

#### See Also

- [Configure Enhanced Personal Information Management Using Field Sets](https://help.salesforce.com/s/articleView?id=platform.users_personal_info_field_sets.htm&release=264.0.0&type=5 "Enhanced Personal Information Management conceals personal information fields from authenticated external users on Experience Cloud sites. If your org enabled this feature in Spring '22 or later, use the PersonalInfo_EPIM field set to control which user fields are hidden.")
- [Create and Edit Field Sets](https://help.salesforce.com/s/articleView?id=platform.fields_editing_field_sets.htm&type=5&language=en_US)
- [Personal User Information Policies and Timelines](https://help.salesforce.com/s/articleView?id=platform.users_personal_info_timeline.htm&release=264.0.0&type=5 "To protect your external users’ data, Salesforce introduced security settings that let you control personal user information visibility. Use this topic as a starting point to understand all the security improvements and updates, including timelines for enforcement and how to prepare for the changes.")