What Most People Miss About Password Protected Excel Files

It's 3:12 PM. You just emailed a file named Q3-Financials-CONFIDENTIAL.xlsx to your auditor. You set a password. You hit Send. You breathe. Then your colleague asks: 'Wait — is that file *really* encrypted? Or just locked?' You pause. You're not sure.

Quick Answer

Yes — but only if you used File > Info > Protect Workbook > Encrypt with Password. That applies AES-128 or AES-256 encryption. Passwords set via Review > Protect Sheet or Protect Workbook (structure only) do not encrypt — they just prevent editing or structural changes. The underlying data remains readable by tools that bypass Excel’s UI.

All the Methods

MethodStepsBest ForLimitations
File-level encryptionFile > Info > Protect Workbook > Encrypt with PasswordSecuring full file contents from unauthorized accessPassword recovery is impossible if lost
Sheet protectionReview > Protect Sheet > enter passwordPreventing accidental edits to formulas or formattingZero encryption — cell values visible in Formula Bar, XML extraction, or VBA
Workbook structure protectionReview > Protect Workbook > check 'Structure' > enter passwordStopping sheet adds/deletes/renamesNo encryption — raw XML still fully accessible
VBA project passwordAlt + F11 > Tools > VBAProject Properties > Protection tabHiding macro logic from casual usersNot encryption — VBA password can be removed with hex editors or free tools
Password-protected ZIP wrapperSave as .xlsx > compress into ZIP > set ZIP passwordAdding a second layer outside ExcelRequires recipient to unzip first — breaks Excel auto-opening and cloud sync

Method 1 Deep Dive

This is the only method that truly encrypts your data. When you choose Encrypt with Password, Excel rewrites the entire file using AES encryption before saving. No cell value — not even hidden ones in column Z or buried in array formulas — is readable without the key.

Try it now with real sample data:

A1B1C1D1
Sarah ChenAcme Corp$45,2002024-03-15
Marcus LeeVeridian Solutions$62,8002024-04-02
Priya NairNexus Labs$38,1502024-04-11
Diego RuizStellar Dynamics$51,9002024-04-18
Anya PetrovaOrion Group$73,4002024-05-03

Select File > Info > Protect Workbook > Encrypt with Password. Enter AlphaQ3!2024. Save. Close. Reopen — you’ll see the password prompt before anything loads. Open that same file in Notepad++ or VS Code? You’ll see only gibberish — no names, no dollar amounts, no dates. That’s real encryption.

Pro tip: Excel defaults to AES-128 on older versions, but if you’re on Microsoft 365 or Excel 2019+, it uses AES-256 automatically — provided you’re saving as .xlsx or .xlsb, not legacy .xls. And yes — this works for files stored in SharePoint or OneDrive. The encryption stays intact.

Method 2 Deep Dive

Now try protecting just the sheet. Select Review > Protect Sheet. Enter SheetLock2024. Click OK. You’ll notice something odd: you can still select cells A1:D5. You can copy them. Paste them elsewhere. You can even view formulas in the Formula Bar — unless you previously hid them (Format Cells > Protection > Hidden, then protected). But here’s what most people miss:

If you change the file extension from .xlsx to .zip, extract it, and open xl/worksheets/sheet1.xml in any text editor — you’ll see every value in plain text:

<c r="A1"><v>45200</v></c>
<c r="B1"><v>Acme Corp</v></c>

No encryption. Just obfuscation. Even worse: open the same file in LibreOffice Calc — it opens instantly, no password prompt. Why? Because LibreOffice ignores Excel’s sheet-protection flag entirely. (Trust me, I learned this the hard way during a vendor audit.)

This method has its place — locking down a dashboard so interns don’t break pivot tables — but never use it for sensitive PII, salaries, or contract terms. If your company policy says “all confidential data must be encrypted”, sheet protection alone fails that test.

Cheat Sheet

TaskExact StepsShortcutVerification Tip
Apply real encryptionFile > Info > Protect Workbook > Encrypt with Password → enter & confirmNone (no Alt sequence)File size increases ~10–15%. Opening shows password prompt *before* any content renders.
Check current protectionFile > Info > Permissions > See who can access → look for 'Encrypted'Alt+F+IIf it says 'Protected' but not 'Encrypted', it’s only sheet/workbook structure protection.
Remove weak protectionReview > Unprotect Sheet (if password known) or Review > Unprotect WorkbookAlt+R+U+S (sheet), Alt+R+U+W (workbook)After removal, verify no 'Locked' icon appears in the status bar.
Test encryption strengthRename file to .zip → extract → try opening xl/sharedStrings.xmlNoneIf you see readable text: NOT encrypted. If you see binary garbage or 'Invalid ZIP': encryption is active.
Michael Lee

Michael Lee

Michael covers the latest in office software updates