Studio 2.3 - New Hidden Upsell Step For Regular Giving 🚀

Sorry, we didn't find any relevant articles for you.

Send us your queries using the form below and we will get back to you with a solution.

How to Configure Form Encryption for the Final Step in Studio

Overview

This article explains how to configure URL parameter encryption for the final step of a Studio form.
This feature ensures that sensitive data is securely passed to the Salesforce Payment Form by encrypting URL parameters instead of exposing them as readable text.

Step 1: Generate an Encryption Key

The encryption key must be exactly 32 characters long, containing only letters (A–Z, a–z) and/or numbers (0–9).

Use an Online Generator:

You can use a secure random string generator such as: 

Random.org String Generator: https://www.random.org/strings/

Instructions:

  1. Set length to 32
  2. Enable: Letters (uppercase + lowercase) and Numbers
  3. Click “Get Strings”
  4. Copy the generated string

Example: Dp6xMzEaytVUBNppY4gMGtyVEvcqx5Ed

Security Notes:

  • Do NOT reuse keys across different forms
  • Store the key securely (do not expose in public docs)
  • Treat this key like a password
 

 

Step 2: Update Form-Level Encryption Key

After generating your 32-character encryption key, you need to update it in the selected Payment Form in Salesforce.

Instructions:

  1. Navigate to Payment Forms in the Payments2Us app after logging in to Salesforce
  2. Click to open the form you want to use for receiving encrypted values
  3. Find the field: “URL Encrypted Parameters Key”
  4. Click the pencil (edit) icon next to this field
  5. Paste the 32-character encryption key you generated in Step 1
  6. Click Save

 

Step 3: Insert Encryption Key in Studio

After updating the encryption key in Salesforce, you must also configure the same key in Studio.

Instructions:

  1. Go to Studio
  2. Navigate to Manage Forms
  3. Find the existing form and click Edit
  4. Ensure the “Form Url” points to the Payment Form updated in Step 2
  5. Enter the 32-character encryption key in “URL Encrypted Parameters Key”
  6. Click Update

⚠️ Important:

The encryption key must be identical in both:

  • Salesforce (Payment Form)
  • Studio Form

Otherwise, encrypted parameters will fail to load.

 

 

Step 4: Verify Encryption is Applied

After completing the setup, you can verify whether the values are correctly encrypted.

Instructions:

  1. In Studio, open a page that uses the form configured in Step 3
  2. Fill in the form and proceed to the Payment step
  1. On the Payment page: 
    1. Right-click on the payment form (inside the iFrame)
    2. Select “View Frame Source” (or similar, depending on your browser)
  2. In the opened source page:
    1. Look at the URL of the Source page
    2. Check whether it contains the parameter: &params= 

 

Expected Result:

If encryption is applied correctly:
The URL will contain &params=
The value after &params= will be a long encrypted string (ciphertext)
No readable field values (e.g. FirstName, Email) will appear in the URL

If encryption is NOT applied:
The URL will not contain &params=
Form values will appear directly in the URL as readable plaintext
For example: &PayFrequency=One-off&DonationAmount=50&PaymentBy=Individual

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Updated at June 12th, 2026

Was this article helpful?