Salesforce Security Resources
Curated guides, learning paths, and tools to help you secure your Salesforce organization.
Review and Comply with Security Requirements
To protect against evolving cybersecurity threats, Salesforce is strengthening its security controls.
Cybersecurity is a shared responsibility. While Salesforce builds security into everything we do and provides the necessary tools and resources to protect your data, it is also up to you to implement security controls and best practices to further strengthen the security of your Salesforce instance.
Salesforce Security Basics
Whether getting started with Salesforce or strengthening your security posture, use these resources to protect yourself, your data, and your business.
Secure Your Salesforce Org
Configure authentication and access controls so your users work securely. Then set up essential protections and monitor your org's health.
HelpSecurity-related Platform Updates
Review critical product changes to the Salesforce Platform that impact your Salesforce Org's security.
BlogStrengthening Salesforce Security Against AI-Driven Threats
Learn how Salesforce is proactively enforcing stronger customer security practices, configuration settings, and introducing new expert-guided services for customers.
HelpManage Users and Data Access
Keep your users up to date with the permissions and access that they require to perform their everyday tasks.
HelpIdentify Your Users and Manage Access
Authenticate users across your orgs, Experience Cloud sites, and digital channels to provide authorized access to your data.
HelpReview Your Security Health
Review your security configuration and get recommendations to identify and address potential vulnerabilities.
TrailheadSecurity Fundamentals
Educate your users, protect your Salesforce org, and encourage a culture of security.
BlogEstablishing a Trust-First Culture
Learn how to build a strong security culture through user education.
VideoWatch the Who Sees What Video Series
Browse videos about how to use Salesforce securely.
TrailheadProtect Your Salesforce Data
Learn how you and your users can work together to keep your data safe.
Multi-Factor Authentication & Access Management
Multi-Factor Authentication for Salesforce Orgs
Protect your users from security threats like phishing, credential stuffing, and account takeovers. Salesforce requires MFA for all logins to Salesforce products.
Security SiteMFA for Salesforce
Understand the importance of MFA and how it protects against phishing and account takeover.
BlogPrinciple of Least Privilege
Grant users the minimum access necessary to do their jobs.
Advanced Tools to Build Apps and Secure Data
Salesforce Well-Architected: Secure
Understand how to make solutions more secure by focusing on organizational security, session security, and data security.
TrailheadMonitor and Secure Your Org
Configure security controls, protect sensitive data, and ensure compliance with Trusted Services.
HelpSalesforce Shield
Learn how to set up and use enhanced encryption, monitoring, and audit capabilities.
Develop Securely Using Salesforce
Developer Discussion Forum
Get help from security experts in the developer community.
ToolCode Scanner Portal
Catch common security issues in your code.
Dev DocSecure Coding Guidelines
Learn about the most common security issues Salesforce has identified while auditing applications built on or integrated with the Lightning Platform.
TrailheadDevelop Secure Web Apps
Detect and prevent common vulnerabilities in your code and strengthen your web apps.
Dev DocSecurity Developer Center
Find resources for building and securing Salesforce applications.