Protect your at-rest backup data and meet compliance requirements by using dedicated, tenant-specific root keys with Shield Platform Encryption. Create a key with Shield Platform Encryption, or bring your own root key.
Where: This change applies to Lightning Experience in Enterprise, Performance, Unlimited, and Developer editions with the Salesforce Shield or Shield Platform Encryption add-on license and Backup & Recover Next license.
How: On the Encryption Settings page in Setup, turn on Manage Backup & Recover Keys. Salesforce generates a root key for you. If you have an active key when you enable backups for the first time, Salesforce encrypts your backups with that key automatically. Otherwise, when enabling backups, click Go to Platform Encryption and create a key.