After clicking on , users with Decrypt field value permission (extra authentication disabled) get the next options:
If extra authentication enabled, the user will be prompted to authorize before attempting any of the actions (show/edit/copy the value).