After clicking on , users with Decrypt field value permission (extra authentication disabled) get the next options:
If extra authentication enabled, the user will be prompted to authorize before attempting any of the actions.
If authorization fails, none of the options (show/edit/copy the value) are available. A user will get an error message.