This section describes how to use decrypt defaults with encrypted columns. When users who are not permitted to see confidential data run queries against encrypted columns, they see the decrypt defaults instead of the decrypted data. Decrypt defaults allow legacy applications and reports to run without error, even for users not permitted to see confidential data.