To protect against evolving cybersecurity threats, Salesforce regularly strengthens security controls. Review new requirements for access controls, email verification, and connected apps and external client apps that access Salesforce data via OAuth (Open Authorization) flows.
Where: This change applies to Lightning Experience, Salesforce Classic, and all versions of the Salesforce mobile app. Review each linked release note for scope and edition details. Security requirements for Marketing Cloud Engagement differ. See Review New and Upcoming Security Requirements for Marketing Cloud Engagement.
When: These changes are enforced starting in November 2026. Review each linked release note for specific enforcement dates.
Why: These release updates improve access controls.
- Block Apex Anonymous Code Execution from Managed Packages (Release Update)
- Enable Profile Filtering (Release Update)
- Remove Non-Public Fields from Custom Object Data in Aura Action Responses (Release Update)
- Update Apex Code and Flows for Changed Sharing Recalculation Behavior (Release Update)
- If you use Aura, LWR, or Visualforce sites, also see Conceal Personal Information Fields from Guest Users (Release Update)
These release updates tighten security for connected apps and external client apps that access Salesforce data via OAuth (Open Authorization) flows.
- Migrate All Connected Apps to External Client Apps (Release Update)
- Restrict the OAuth 2.0 Device Flow to Local External Client Apps (Release Update)
- Retirement of OAuth 2.0 Username-Password Flow for Connected Apps (Release Update)
- Salesforce Connect Cross-Org Adapter Legacy Authentication Is Being Retired (Release Update)
- OAuth User-Agent and Hybrid User-Agent Flows Retirement (Release Update)
These changes improve the security of email sent from Salesforce.
- If you previously disabled user email verification through Salesforce Customer Support, see Maintain Your Email Verification Exception (Release Update).
- If you own a Trialforce org, see Verify Email-Sending Domains to Create New Templates and Trialforce Source Orgs.
How: To review the release updates, from Setup, in the Quick Find box, enter Release Updates, and then select Release Updates. For each release update, follow the testing and activation steps.
For other changes, see the linked release note for details.