Which profile can view encrypted data by default in Salesforce?

Profile which has View Encrypted Data permission can see encrypted fields and by default this permission is not given to any profile.