---
schema_version: "1"
id: a5a901423873a412d0617a3cb3fa1623585e56e27640f9b50ce254478238138c
title: Encrypt Backup & Recover Next Data
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_security_pe_backup_recover_next.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_pe_backup_recover_next.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e165785f8b055d5ff0fca4e5495f0c7b4797a6246ee6e32768930bccbd6a5591
description: Backup data presents the same compliance and security risks as live data. Protect your data backups with Shield Platform Encryption for Backup & Recover Next. Encrypt backups with tenant-specific root keys that you control. These root keys secure and control the data encryption keys used to encrypt backups at rest. You can generate a root key in Setup, use Bring Your Own Key (BYOK) to upload a key, and rotate root keys.
products:
  - Cross Cloud
release: "262"
---
# Encrypt Backup & Recover Next Data

Backup data presents the same compliance and security risks as live data. Protect your data backups with Shield Platform Encryption for Backup & Recover Next. Encrypt backups with tenant-specific root keys that you control. These root keys secure and control the data encryption keys used to encrypt backups at rest. You can generate a root key in Setup, use Bring Your Own Key (BYOK) to upload a key, and rotate root keys.

**Where:** This change applies to Lightning Experience in Enterprise, Performance, Unlimited, and Developer editions with the Salesforce Shield or Shield Platform Encryption add-on license and Backup & Recover enabled.

**When:** Shield Platform Encryption for Backup & Recover Next is available starting in July 2026.

**How:** When enabling backups in the Backup & Recover app, click **Go to Platform Encryption**. You can also go directly to the Encryption Settings page in Setup. Turn on **Manage Backup & Recover Keys**. Salesforce generates a root key for you. All backups made after your key is activated are encrypted. Backups that existed before your first key is activated aren’t encrypted. If you’re new to Backup & Recover Next and haven’t backed up data yet, we recommend that you create a root key first before backing up data.

#### See Also

- [Encrypt Backup Data with Tenant-Specific Keys](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_bar_platform_encryption_integration.htm&release=262.0.0&type=5 "Protect your at-rest backup data and meet compliance requirements by using dedicated, tenant-specific root keys with Shield Platform Encryption. Create a key with Shield Platform Encryption, or bring your own root key.")