---
sourceDocument: Zurich Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/platform-security

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Using Field Encryption

# Using Field Encryption {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Use Field Encryption to manage access to encrypted data on your instances.  
There are two methods of encrypting field data:

* Single module - Permits data encryption using a single encryption module in a deterministic method.
* Multi module - Permits data encryption using multiple encryption modules in a non-deterministic method. Row Conditions is the new and preferred method of applying multiple modules to a field. Row Conditions applies the multi module capability in a deterministic way.
{#using-column-level-encryption__ul_nvv_cw2_bgc}
Use the related links to find information on common Field Encryption tasks.
* **[Create cryptographic module for Field Encryption](https://www.servicenow.com/docs/NgjwJ9gaZb2K1fTmjH0asA)**   
  Create a Field Encryption cryptographic module to define the mechanisms used for cryptographic operations.
* **[Using multiple encryption modules](https://www.servicenow.com/docs/r~18JMjh8p6CICL6sJmmyA)**   
  Multiple encryption modules enable data to be encrypted with more than one encryption module. If each module has its own access policy based on a role, for example, users with different roles can encrypt data on the same table but used to help prevent them from viewing each other's encrypted data.
* **[Create a cryptographic specification for Field Encryption](https://www.servicenow.com/docs/LkHQLEMeHigOkRQ8YrI23A)**   
  After you create a cryptographic module, access the corresponding cryptographic specification to define the algorithm.
* **[Configure advanced algorithms for Field Encryption Enterprise](https://www.servicenow.com/docs/yAQbuRAIUrMDyoA7SKIaGA)**   
  Create a cryptographic specification to define the algorithm for a cryptographic module. Customize the encryption specifications with advanced options that are available for Field Encryption Enterprise.
* **[Using customer supplied keys with Field Encryption Enterprise](https://www.servicenow.com/docs/00rhuhMRB4JNpghY9X2d6w)**   
  You can use your own customer-supplied key instead of using the ServiceNow® system-generated keys.
* **[Encrypting fields and attachments](https://www.servicenow.com/docs/FV1PURnU7LjWuMB_GNkBMg)**   
  Once cryptographic modules are created, a security admin can define the encrypted fields configuration (EFC) and opt to encrypt a field or attachment on a table.
* **[Field Encryption Enterprise examples](https://www.servicenow.com/docs/Ju6SJycfqHw8zvlWiiZocA#kmf-walkthroughs-tutorials)**   
  These examples walk you through the encryption of fields and attachments using customer-supplied keys.

**Related concepts**   

* [Configure properties for customer-supplied keys](https://www.servicenow.com/docs/KjKWHk2LVDy3R~kxEZDwYg "If the Field Encryption Enterprise plugin is enabled, you can use system properties to define key padding, ephemeral key pair size, and a key validity period of your customer-supplied keys.")
* [Encrypting fields and attachments](https://www.servicenow.com/docs/FV1PURnU7LjWuMB_GNkBMg "Once cryptographic modules are created, a security admin can define the encrypted fields configuration (EFC) and opt to encrypt a field or attachment on a table.")
* [Field Encryption Enterprise examples](https://www.servicenow.com/docs/Ju6SJycfqHw8zvlWiiZocA#kmf-walkthroughs-tutorials "These examples walk you through the encryption of fields and attachments using customer-supplied keys.")  
**Related tasks**   

* [Create cryptographic module for Field Encryption](https://www.servicenow.com/docs/NgjwJ9gaZb2K1fTmjH0asA "Create a Field Encryption cryptographic module to define the mechanisms used for cryptographic operations.")
* [Create a cryptographic specification for Field Encryption](https://www.servicenow.com/docs/LkHQLEMeHigOkRQ8YrI23A "After you create a cryptographic module, access the corresponding cryptographic specification to define the algorithm.")
* [Configure advanced algorithms for Field Encryption Enterprise](https://www.servicenow.com/docs/yAQbuRAIUrMDyoA7SKIaGA "Create a cryptographic specification to define the algorithm for a cryptographic module. Customize the encryption specifications with advanced options that are available for Field Encryption Enterprise.")