Password-Protect a File
Five features answer to the word "protect" in Excel and exactly one of them encrypts anything. A password to open scrambles the file itself. A password to modify, sheet protection, workbook-structure protection and Mark as Final all leave the bytes plainly readable and merely restrict what the interface offers, so anyone who can open the file can copy every cell out of it regardless. File format decides whether even the first one holds: .xlsx, .xlsm and .xlsb encrypt with AES, while saving down to the legacy .xls quietly reverts to the pre-2007 scheme that ordinary recovery tools defeat.
A worked example
A quarterly payroll workbook that has to be emailed to three managers and must stay unreadable to anyone else who receives it by mistake.
File > Info > Protect Workbook > Encrypt with Password, type the password twice, and keep the file saved as .xlsx
Opening the file now demands the password before a single cell is drawn, and the bytes on disk are genuinely encrypted rather than merely flagged. Two consequences arrive with it: the workbook stops opening in Excel for the web and can no longer be co-authored, and each of the three managers can save an unencrypted copy the moment they are inside. Encryption controls the file, not what people do with it afterwards.
Which one do I need?
| If you want to… | Use |
|---|---|
| The file itself must be unreadable without the password | File > Info > Protect Workbook > Encrypt with Password — the only option here that actually encrypts anything |
| Everyone may read it, but only some people may save changes | Save As > Tools > General Options > Password to modify, which opens read-only for everyone else and encrypts nothing |
| You only want to discourage edits rather than enforce anything | Save As > Tools > General Options > Read-only recommended, or File > Info > Mark as Final — a single click gets past either |
| Cells inside a workbook people are meant to open should resist editing | That is sheet protection, which restricts the interface without encrypting the file behind it |
| Sheets must not be added, renamed, deleted or unhidden | Review > Protect Workbook > Structure, which takes its own password, separate from the file-open one and not encryption either |
| A password already on the file needs changing or clearing | Open the file, return to the same box, and overwrite or empty the field |
| Someone suggested zipping the file with a password instead | An archive password guards the archive only — the .xlsx is plain again the moment it is extracted, and the zip tool built into Windows offers no password at all |
| The file has to be co-authored on OneDrive or SharePoint | Encryption rules that out: a workbook with a password to open works in the desktop app only, never in the browser |
Frequently asked questions
What is the difference between a password to open and a password to modify?
A password to open encrypts the workbook, so its contents are unreadable without it. A password to modify encrypts nothing at all: anyone can open the file read-only, read every cell and copy it elsewhere, and the password is only demanded when they try to save over the original. Only the first is a confidentiality control.
Why will my encrypted workbook not open in Excel for the web?
The browser version cannot decrypt workbooks, so a file carrying a password to open has to be opened in the desktop application. The same limitation takes co-authoring with it: while the encryption is in place, two people cannot edit the file simultaneously on OneDrive or SharePoint.
Does saving as .xls keep the same level of protection?
No, and the downgrade happens silently. The modern .xlsx, .xlsm and .xlsb formats encrypt with AES, whereas the legacy .xls format falls back to the much older scheme Excel shipped before 2007, which ordinary recovery tools defeat. If the password is meant to matter, keep the file in a current format.
Can I password-protect just one sheet of a workbook?
Not with a file-open password, which covers the entire workbook and nothing smaller. Per-sheet restrictions come from Protect Sheet, and that governs editing rather than opening. A sheet can also be hidden, but hiding is reversed in two clicks and protects nothing on its own.
New guides and tools, once a month
DE + EN · double opt-in · no spam