Form Encryption is here!

Form Encryption is here!

Hey form builders,

If your data is sensitive enough that a breach would have real consequences, be it reputational, legal, or otherwise, Form Encryption is built for you. Here's a short version of what it does.

Every encrypted form gets protected by an Access Code that only you set. Without this code, the data is completely unreadable. Even if someone gains unauthorized access, they walk away with gibberish.


How it works (without the technical overwhelm)

Setup follows a clean two-step structure.

Step 1: Org-level enablement
Your organization's super admin enables Form Encryption at the org level. This is a one-time setup, the master switch that makes encryption available for forms across your organization. Once it's enabled, form admins can start encrypting individual forms.

Step 2: Form-level configuration
When you're ready to encrypt a specific form, you'll set a 6-character alphanumeric Access Code. This code is yours alone. If you forget it, you can have it sent to your registered email.

Once encryption is enabled on a form, every time someone tries to access the data (all entries, reports, approvals, tasks), they are prompted for the code. Sessions stay open for 30 minutes after a successful entry, then lock again automatically. 

The permanent part and why it matters

Once a form is encrypted, the data stays encrypted permanently. Security that can be switched off on a bad day isn't real security. The permanence is the point.
One practical implication is that you cannot encrypt a form that already has existing records. If you're planning to use Form Encryption, configure it before you start collecting responses. Set it up on a fresh form, not one that already has data in it.

The trade offs 

Encryption means data doesn't flow freely.

Notifications
Configured Email, SMS, WhatsApp, and mobile app notifications will still be sent but by default, they won't include form field data in the notification body.

Exports
Data export as PDF or CSV, downloading attachments, scheduled report mailers can be restricted depending on your org-level permissions. Your org admin controls this at the top level; form admins can customize within those boundaries.

Integrations and webhooks
These require deliberate permission at both the org level and the form level. 
The permission model is layered. Org admins set the ceiling, form admins work within it. It gives teams flexibility without compromising the overall security posture.



For Zoho Sign field users
The Zoho Sign field which lets respondents sign documents right inside a form cannot be added to an encrypted form if integrations and webhooks are restricted at either the org or form level. If your workflow needs both signing and encryption, make sure integrations are permitted first.

Managing access across your team

Real-world workflows involve multiple people, and we've built that into the encryption design.

Sharing the access code
Form admins can send the access code to collaborators directly via email.

Approvers
When adding an approver to an encrypted form, there's a dedicated option called Notify Approvers with Access Code. It includes the code in the approval notification they receive, so they can access the approvals section without a separate back-and-forth with the form admin.

Locked users
If a user enters the wrong access code five times in a row, their access to the form data locks automatically.

This prevents brute-force attempts while still being recoverable.
Form admins can view a list of all locked users in the encryption settings and unlock them individually or all at once.


30-minute unlock window
This session model means authorized users aren't re-entering the code constantly. But it also means access doesn't stay open indefinitely on an unattended browser.

A few important things to know before you enable it

We want to set expectations clearly so there are no surprises:
  1. When you disable organization-level encryption, you will no longer be able to encrypt new forms. However, any forms that were previously encrypted will remain encrypted.
  2. A form once encrypted will remain permanently encrypted, even if you disable the organization-level encryption settings. It cannot be disabled from the form-level encryption settings either.
  3. Form encryption cannot be configured on forms that already have existing records. Start fresh.
  4. Encrypted forms and HIPAA-enabled forms are mutually exclusive. Only one can be active at a time on a given form.
  5. If a feature is restricted at the organization level, you cannot enable it on your encrypted form. 

We'd love to hear from those of you who've been asking for this. If you have any questions, drop them below - we're here and paying attention.

Cheers, 
Samhita
Zoho Forms

    • Sticky Posts

    • Password-Protected PDFs in Zoho Forms

      Hello form builders, PDFs generated from your form submissions travel through email, across devices, and between hands you didn't intend. For a restaurant's event inquiry, that's fine. But for a signed legal agreement, a loan application, or personal

    • Introducing Spotlight Forms

      Hey form builders! If someone opens your form, sees the wall of fields ahead, and quietly closes the tab. It may not be because the questions were hard. It could be because the experience felt like too much. Which is why we have now introduced a new form

    • Access millions of Unsplash photos directly from the Theme Builder

      Hello form builders, We're excited to introduce a new enhancement to the Zoho Forms Theme Builder. You can now browse and apply millions of high-quality images from Unsplash without leaving the Theme Builder. There's no need to download images, switch

    • Introducing the Yes/No field: Binary decisions made beautiful

      Greetings, form architects! What would you do when you need a simple yes/no answer on your form? Normally, you add a Radio field. Type Yes. Type No. Until now. The new Yes/No field is purpose-built for binary decisions. It is preconfigured, visually consistent,

    • Form Encryption is here!

      Hey form builders, If your data is sensitive enough that a breach would have real consequences, be it reputational, legal, or otherwise, Form Encryption is built for you. Here's a short version of what it does. Every encrypted form gets protected by an

      • Recent Topics

      • Unable to send message;Reason:553 Relaying disallowed. Invalid Domain

        Hi, Now when I try to reply to an email, I see the Unable to send message;Reason:553 Relaying disallowed. Invalid Domain voicemessagedownloader.com error. I tested sending an email when I set it up in the past and it worked. I have checked the Zoho Organization

      • RFID Scanner/Adapter Solution for barcode scanning

        Hello, We will be trialing using barcode scanning for item verification during our picking process. Using a phone or a tablet is awkward and uncomfortable. Are there any Zoho compatible RFID scanners, or an RFID device/adapter that will connect with a

      • Approval Process not retriggering after rejection when stage is manually changed back

        We have an Approval Process on the Opportunities module that triggers when Stage is changed to Negotiation (Execute on: Edit Only). On rejection, a field update action reverts Stage back to Proposal. The issue: after rejection, AE can manually changes

      • Free Webinar Alert! Workdrive + Office Suite in Zoho Workplace: Create, co-edit and collaborate

        Hello Zoho Community! Looking for a better way to create, manage, and collaborate on your business documents? Join our upcoming webinar to discover how Zoho WorkDrive and the Zoho Office Suite (Writer, Sheet, and Show) help teams to work together from

      • Updating Sales orders on hold

        Surely updating irrelevant fields such as shipping date should be allowed when sales orders are awaiting back orders? Maybe the PO is going to be late arriving so we have to change the shipment date of the Sales order ! Not even allowed through the api - {"code":36014,"message":"Sales orders that have been shipped or on hold cannot be updated."}

      • Two-Factor Authentication in Zoho Mail: Add an extra layer of security to your organization

        Account security is a critical aspect of managing any organization's email. With increasing risks of unauthorized access, a single password may not always be sufficient to keep accounts protected. Zoho Mail's Two-Factor Authentication (TFA) addresses

      • Dark Mode - Font Colors Don't Work

        When editing a document in Dark Mode and selecting font colors, they don't show up on screen.  Viewing/editing the same document in Light Mode shows them just fine.

      • API to post drafts for social media

        I we want to post draft posts to our zoho social account and then approve and schedule them within Zoho social. is this possible with for example: https://apis.zoho.com/social/v2/post TIA Jon

      • How to show product cards in your chatbot

        Hey everyone, If you are using Guided Conversations to help customers find products, you have probably run into this problem: the bot gives customers a list of options, but they still have no idea which one to pick. There will be no images, no specs,

      • Changing settings for auto logoff

        I've noticed that when I haven't used Cliq for a while, I have to re-enter my password. That is really clumsy, especially if you have a complicated password. Because it won't be filled in automatically. Is there a way to change that behaviour? We are

      • How do you create invoices before sending them through Zoho Invoice?

        Hi everyone, I'm curious how other businesses handle their invoicing workflow before sending invoices through Zoho Invoice. Do you: Create invoices directly inside Zoho? Prepare them first in another invoice tool or template? Use Excel or Word before

      • ZML Error/Bug

        Hi, I would like to request for your help regarding this kind of behavior. Requested_Start_Time & End_Time - date-time fields https://......#Page:PH_Calendar_Page?reqDate=08-04-2026 https://......#Page:PH_Calendar_Page?reqDate=07-31-2026 https://....#Page:PH_Calendar_Page?reqDate=08-03-2026

      • Item with name in different languate

        Hello, is there a way to have an item with its name in different languages? For example: I sell an item in different markets and I'd like to have a Proposal and the Invoice with the Item Name in a specific language. Rino Bertolotto Zoho Specialist, STESA srl

      • Email notification for followers

        Is there a way to enable email notification for followers of a support ticket? ie: Ticket #123 is owned by Agent#1, Agent#2 adds themselves as a follower. Whenever ticket #123 receives an email from the customer, Agent#1 receives an email. Agent#2 would

      • Migration of emails from Yandex to Zoho

        I am trying to migrate an yandex mail account to zoho mail account. I am confused with all the related articles/informations in the net. Could someone please outline the process to do it, just thinking about me as a novice with limited knowledge or experience. A couple of questions from the knowledge gained. 1. I believe we have to delete the yandex current MX from the website records and add Zoho MX. What happens to the emails as we remove the mail exchange record. Yandex stops updating emails and

      • Auto-fill from logged-in user's profile for Name Fields in Subforms

        Hi, The Name field is great, but I see you can't tick the Initial Value option of "Auto-fill from logged-in user's profile" when it is on a Subform, why not? Thanks Dan

      • I am not able to check in and checkout in zoho people even location access allowed

        This issue i am facing in mackbook air m1, I allowed location in chrome browser and i also tried in safari but getting similar issue. Please have a look ASAP.

      • Calling a function within another function

        Hello there, I have just found out that you can simply call up functions in other functions, regardless of the department. You can't create functions with the same name twice, even though you are in a different department. If you try it, you don't get

      • 【続々公開】Zoholics Japan 2026 セッション情報を更新しました！

        ユーザーの皆さま、こんにちは！ Zoholics Japan 2026のセッション情報を続々と公開しています！ 今年は3つのトラックで、Zohoの最新情報やAI活用、製品アップデート、 活用事例など、多彩なセッションをお届けします。 現在公開中のセッション（一部） ・Zoho CRM 製品アップデート ・Zoho CRM Plus 製品アップデート ・Zoho Community セッション ・Zoho Desk セッション ・中堅・成長企業の人事DX ～AI時代に何から始めるべきか？～ ・Zoho

      • Zoho CRM Community Digest - July 2026 | Part 1

        Hello everyone, July is here! The first two weeks brought six CRM updates ranging from privacy-ready webforms to a significantly more powerful Layout Rules engine, two community wins worth a look (a dashboard workaround for spotting leads with no activities,

      • New Ways to Personalize, Organize, and Share Your Notes

        We're excited to introduce a new set of enhancements in Zoho Notebook that make your note-taking experience cleaner, more flexible, and easier to share. With this update, you can create notes that automatically adapt to your device theme, browse your

      • SPAM (and some other) folders missing on three of my Zoho Mail accounts

        I have four email accounts with Zoho Mail. Three days ago, the Spam folder on three of these accounts vanished. It is gone on the Windows and Linux desktops as well as the web-based and Android versions, and I have tried it on multiple machines. The only

      • Zoho Commerce B2B

        Hello, I have signed up for a Zoho Commerce B2B product demo but it's not clear to me how the B2B experience would look for my customers, in a couple of ways. 1) Some of my customers are on terms and some pay upfront with credit card. How do I hide/show

      • CRM x WorkDrive: We're rolling out the WorkDrive-powered file storage experience for existing users

        Release plan: Gradual rollout to customers without file storage add-ons, in this order: 1. Standalone CRM 2. CRM Plus and Zoho One DCs: All | Editions: All Available now for: - Standalone CRM accounts in Free and Standard editions without file storage

      • Introducing spam detection for webforms: An additional layer of protection to keep your Zoho CRM clean and secure

        Greetings all, One of the most highly anticipated feature launches—Spam Detection in webforms—has finally arrived! Webforms are a vital tool for record generation, but they're also vulnerable to submissions from unauthenticated or malicious sources, which

      • Rich-text fields in Zoho CRM

        Moderation Update: During the initial release of Rich Text fields, it was supported only in the Enterprise and Ultimate editions. We have gradually extended Rich Text fields to all the paid editions of Zoho CRM. Hello everyone, We're thrilled to announce

      • Add Large Lists to Choice-Based Field Rules

        Hi, The new Large List is good, but you can't then use the Choice-Based Field Rules with it to limit the Group Choices or Choices? Thanks Dan

      • Email-Data Synchronization with Zoho Analytics

        Hello, Enterprise Support Community! We're excited to announce the availability of Email Data Synchronization with Zoho Analytics! This highly requested enhancement allows you to sync email data from Zoho CRM into Zoho Analytics, making it easier to analyze

      • Zoho - shopify sales order - invoicing

        we have integrated zoho with shopify. so now , when an order comes through shopify-it raises a sales order in zoho. And at this time- the inventory goes down in shopify, according to the sale. Then we manually convert the sales order to an invoice, and

      • Enable Replenishments Option not Available

        I'm looking to turn on the replenishment option in Zoho Inventory and I'm not finding settings for it in Zoho Books or Zoho Inventory. This is the tutorial I was following from Zoho. Is there a step I'm missing to have Replenishments be available in Zoho

      • Kiosk Page Refresh

        We have a Kiosk running from a button in contacts to update values and also add related lists, which works great, but when the kiosk is finished the page does not refresh to show the changes. Is there a way to force the contact to refresh/update when

      • [Solution] Analyze, Act and Automate with Drill Actions

        Insights create value only when they lead to action. Traditional dashboards excel at helping you understand what is happening, but acting on those insights often requires manual intervention leaving the dashboard, opening another application, finding

      • Building extensions #6: Handling modal boxes to enhance user experience

        In our previous post, we explored creating custom graphical user interfaces using widgets. In this post, we'll learn about enhancing user experience through modal boxes. What is a modal box, and where is it used? A modal box is essentially a widget interface

      • Improve User Onboarding in Zoho Projects with Zoho DAP

        Rolling out new processes or onboarding new users in the tool comes with a familiar challenge: the employees need guidance at the moment they are doing the work. Traditional training sessions and knowledge sharing often require users to leave the application.

      • Zoho Social API for generating draft posts from a third-party app ?

        Hello everyone, I hope you are all well. I have a question regarding Zoho Social. I am developing an application that generates social media posts, and I would like to be able to incorporate a feature that allows saving these posts as drafts in Zoho Social.

      • Your CRO data is now on your AI Assistant: PageSense is live on Zoho MCP

        Hello Everyone, We are excited to announce Zoho PageSense is now live on Zoho MCP servers. Here is what that means for you. Every answer about your website lives behind tons of data across different modules. Which test is winning. Where visitors bail.

      • Feature Enhancement Request – Bulk Download of Signed Documents in Zoho Sign

        Hi Team, We would like to request a Bulk Download feature for signed documents in Zoho Sign. Currently, Zoho Sign allows users to send documents in bulk using an Excel sheet, but there is no option to download the completed signed documents in bulk. Users

      • delete a user on Zoho Desk

        Kindly I Need help to delete a user on Zoho Desk but I deactivated but not deactivated with licenses so what can I Do?

      • Unable to open Attendance Regularization request, reason?

        Unable to open Attendance Regularization request.

      • API actions/approvals endpoint returns UNAPPROVABLE despite user having full permissions and being the assigned approver

        Hi Team, We are trying to programmatically approve a record via the CRM API but consistently receive an UNAPPROVABLE error, even though the same user can approve the record without issue from the UI. Endpoint called: POST https://www.zohoapis.com/crm/v6/{module}/{record_id}/actions/approvals

      • Next Page