Lock Down Information During Installation of Installation-Key-Protected Unlocked Packages

We are making unlocked packages more secure with this change. An installation key is required as the first step during installation, ensuring that no package information is disclosed until the correct installation key is supplied. Previously, keys were verified only at the end of the package install. Moving verification to the start of the install protects package information, like the name and components, from users who don’t possess the key.

Where: This change applies to Lightning Experience, Salesforce Classic, and all versions of the Salesforce app in Group, Professional, Enterprise, Performance, Unlimited, and Developer editions.

When: The installer UI and API changes are effective in the current release. Changes to the Salesforce CLI will be announced in a future release.