Encrypted Field v1.2.0

Encrypted Field adds protected custom text fields to EspoCRM for values that should not appear in ordinary record views, API reads, or standard exports. Users see masked content unless their access explicitly permits decryption or export.

Key capabilities

• Encrypts custom field values using a configured encryption profile and key.
• Offers AES-256-GCM as the documented default and supports ChaCha20-Poly1305.
• Masks protected values during normal record viewing and API access.
• Separates permission to set a value from permission to decrypt or export it.
• Excludes encrypted values from standard exports unless authorized access is used.
• Provides administration and diagnostic tools for profiles, methods, and keys.

Business value

It is intended for sensitive text such as access tokens, private identifiers, credentials, or secure notes that should remain hidden during ordinary record use. Encryption profiles and permissions help administrators control how protected values are stored, revealed, and exported. Keeping the capability close to the related records helps users act on current CRM information without repeatedly changing systems or rebuilding context. The documented setup provides administrators with a practical way to align the feature with the entities, layouts, and working practices already used in EspoCRM.