Password Protect Excel File: Step-by-Step Guide

Most people treat password protection like a seatbelt: something you add once and never think about again. That's the wrong mental model for Excel files, and it's why sensitive data keeps leaking through what feels like a locked door.

I spent nearly a decade as a staff accountant and financial analyst handling payroll models and budget trackers that had no business being opened by the wrong person. I also watched a colleague copy sensitive employee data manually every Friday afternoon into an unprotected file she'd email to three different managers. No password. No restrictions. Just a spreadsheet floating around an inbox. Knowing how to password protect an Excel file correctly (and knowing what that protection actually covers) would have changed her workflow entirely. This article covers both.

---

What Excel Lets You Lock Down (and What to Have Ready Before You Start)

Excel gives you three distinct layers of protection, and they don't overlap the way most people assume. An open password (also called file encryption) prevents anyone from opening the file at all without the correct password. A modify password lets people open the file in read-only mode but blocks editing. Workbook protection locks the structure, meaning no one can add, delete, rename, or rearrange sheets.

What Excel's native protection can't guarantee: resistance to determined third-party recovery tools, enterprise-grade access logging, or compliance with regulations like HIPAA on its own. More on that in the last section.

The only prerequisite here is an Excel file already open in Microsoft Excel on Windows or Mac. If you're new to managing files in Excel generally, the Excel file management and sharing guide is a good place to start.

---

Step 1: Set an Encrypt-with-Password Lock So No One Can Open the File Without It

This is the one that actually locks the front door. Excel uses AES-256 encryption when you apply an open password, the same standard used in most serious security applications. Older versions of Excel (pre-2010) used significantly weaker encryption, which is worth knowing if your organization still has legacy files in circulation.

Windows: File → Info → Protect Workbook → Encrypt with Password

1. With your file open, click File in the top-left corner.
2. Select Info from the left panel.
3. Click Protect Workbook, then choose Encrypt with Password.
4. Type your password and click OK. Excel will ask you to confirm it — type it again exactly.
5. Save the file. The encryption isn't active until you save.

To verify it worked: close the file, then reopen it. Excel should prompt for a password before the file loads.

Mac: File → Passwords (or Review → Protect Workbook)

1. Go to File in the menu bar and select Passwords. Alternatively, open the Review tab and click Protect Workbook.
2. In the dialog box, enter a password under "Password to open."
3. Click OK, confirm the password, then save.

The steps look slightly different on Mac, but the outcome is the same: AES-256 encryption applied at the file level in Microsoft 365.

---

Step 2: Add Worksheet or Workbook Structure Protection to Restrict Editing

Once you've locked the file itself, you may also need to control what people can do inside it. That's a separate layer, and it's where I see the most confusion, including from people who've been using Excel for years.

Protect specific cells or a whole worksheet

Worksheet protection prevents users from editing locked cells. It does not encrypt the file. Someone can still open it if there's no open password set. To apply it, right-click the sheet tab, choose Protect Sheet, set a password, and select which actions you want to allow. You can also restrict editing in Excel at the cell level by unlocking only the cells you want editable before turning on sheet protection.

Lock workbook structure so sheets can't be added or deleted

Go to Review → Protect Workbook → Protect Structure and Windows. This stops anyone from inserting, deleting, or renaming sheets — useful for shared reporting templates where the structure shouldn't change even if editing is otherwise allowed.

The read-only option (a modify password) sits in between. People can open and view the file but can't save changes back to the original. You'll find it under File → Save As → Tools → General Options on Windows.

---

Step 3: Remove a Password from an Excel File When Protection Is No Longer Needed

To remove an open password on Windows, go back to File → Info → Protect Workbook → Encrypt with Password, clear the password field entirely, and save. On Mac, return to File → Passwords and delete the password from the field.

To unprotect a worksheet, right-click the tab and select Unprotect Sheet, then enter the password. Workbook structure protection comes off through Review → Protect Workbook using the same password you set.

You must know the original password. Microsoft has no recovery mechanism. If you forget the password, the file stays locked — from you too.

Before you share any protected file, make sure you're also saving it correctly. The guide on how to save an Excel file properly covers formats and settings worth double-checking.

---

Common Mistakes When You Password Protect an Excel File (Including the Security Limits Most Guides Skip)

This is the section most tutorials either rush through or skip entirely.

Emailing the file and password in the same message is the most common mistake, and it's a serious one. If that email is intercepted or forwarded, you've handed over both the lock and the key. Send the file in one message and the password through a separate channel: a text, a phone call, or a password manager share link.

Assuming Excel's protection is uncrackable is the second problem. AES-256 encryption is genuinely strong, but third-party Excel password recovery tools exist and are readily available. They're designed primarily for people who've forgotten their own passwords, but they work regardless of intent. For truly sensitive data — anything touching HIPAA, financial disclosures, or employee records — Excel's native protection should be one layer in a broader security approach, not the whole strategy.

Confusing worksheet protection with file encryption is the third. Worksheet-level protection isn't a security feature in the traditional sense: it prevents accidental edits to locked cells, not unauthorized access to the file. A file with only sheet protection and no open password can be opened by anyone.

Google Sheets has no built-in file-level encryption equivalent, which is one reason Excel remains the default for sensitive financial work despite its limitations.

For a broader look at how file protection fits into everyday Excel habits, the Excel for beginners starter guide covers the foundational file practices worth building on.

---

Frequently Asked Questions

If you take one thing from this article: "Encrypt with Password" and "Protect Sheet" are not the same thing and don't cover the same ground. Know which one you need before you share the file.