---
title: "Configuring Encryption Settings"
description: "Veeam Backup for Salesforce allows you to encrypt backed-up data stored in PostgreSQL databases and file repositories to protect your information from unauthorized access."
canonical: "https://helpcenter.veeam.com/docs/backup_salesforce/userguide/configuring_encryption_settings.html"
breadcrumb: "User Guide > Configuring Veeam Backup for Salesforce > Configuring Encryption Settings"
dateModified: "2026-10-16"
---

# Configuring Encryption Settings

Veeam Backup for Salesforce allows you to encrypt backed-up data stored in PostgreSQL databases and file repositories to protect your information from unauthorized access. To do that, the product leverages a cryptographic algorithm to transform data to an unreadable format using an organization-specific data key that is enciphered with either of the following master keys:

- An original (built-in) Veeam Backup for Salesforce master encryption key that is automatically generated by Veeam Backup for Salesforce upon installation.
- A native Amazon Web Services Key Management Service (AWS KMS) customer-managed master encryption key. 

::: important

- Shared AWS KMS keys are not supported in Veeam Backup for Salesforce 3.2.
- If an AWS KMS key is used to encrypt backed-up data, DO NOT delete this key from the AWS KMS account. Otherwise, you will not be able to decrypt the encrypted data.

:::


## In This Section

- [Managing AWS KMS Connections](managing_kms_connections.md)
- [Managing Encryption Keys](downloading_encryption_keys.md)