Overview
This article explains how to configure URL parameter encryption for the final step of a Studio form.
This feature ensures that sensitive data is securely passed to the Salesforce Payment Form by encrypting URL parameters instead of exposing them as readable text.
Step 1: Generate an Encryption Key
The encryption key must be exactly 32 characters long, containing only letters (A–Z, a–z) and/or numbers (0–9).
Use an Online Generator:
You can use a secure random string generator such as:
Random.org String Generator: https://www.random.org/strings/
Instructions:
- Set length to 32
- Enable: Letters (uppercase + lowercase) and Numbers
- Click “Get Strings”
- Copy the generated string
Example: Dp6xMzEaytVUBNppY4gMGtyVEvcqx5Ed
Security Notes:
- Do NOT reuse keys across different forms
- Store the key securely (do not expose in public docs)
- Treat this key like a password
Step 2: Update Form-Level Encryption Key
After generating your 32-character encryption key, you need to update it in the selected Payment Form in Salesforce.
Instructions:
- Navigate to Payment Forms in the Payments2Us app after logging in to Salesforce
- Click to open the form you want to use for receiving encrypted values
- Find the field: “URL Encrypted Parameters Key”
- Click the pencil (edit) icon next to this field
- Paste the 32-character encryption key you generated in Step 1
- Click Save

Step 3: Insert Encryption Key in Studio
After updating the encryption key in Salesforce, you must also configure the same key in Studio.
Instructions:
- Go to Studio
- Navigate to Manage Forms
- Find the existing form and click Edit
- Ensure the “Form Url” points to the Payment Form updated in Step 2
- Enter the 32-character encryption key in “URL Encrypted Parameters Key”
- Click Update
⚠️ Important:
The encryption key must be identical in both:
- Salesforce (Payment Form)
- Studio Form
Otherwise, encrypted parameters will fail to load.

Step 4: Verify Encryption is Applied
After completing the setup, you can verify whether the values are correctly encrypted.
Instructions:
- In Studio, open a page that uses the form configured in Step 3
- Fill in the form and proceed to the Payment step

- On the Payment page:
- Right-click on the payment form (inside the iFrame)
- Select “View Frame Source” (or similar, depending on your browser)
- In the opened source page:
- Look at the URL of the Source page
- Check whether it contains the parameter: ¶ms=

Expected Result:
If encryption is applied correctly:
The URL will contain ¶ms=
The value after ¶ms= will be a long encrypted string (ciphertext)
No readable field values (e.g. FirstName, Email) will appear in the URL
If encryption is NOT applied:
The URL will not contain ¶ms=
Form values will appear directly in the URL as readable plaintext
For example: &PayFrequency=One-off&DonationAmount=50&PaymentBy=Individual