Knowing how to remove password protection from excel is one of the most practical spreadsheet skills you can pick up, especially when you inherit files from departed coworkers, recover old archives, or simply need to restructure a workbook that someone locked years ago. Excel offers several layers of protection, and each one is removed in a slightly different way. This guide walks you through every legitimate method, from the simple File menu route to advanced VBA techniques, so you can unlock your files quickly and safely.

Excel protection generally falls into four buckets: workbook-open passwords that block file access entirely, modify passwords that allow read-only viewing, worksheet protection that prevents cell edits, and workbook structure protection that locks the sheet tabs. Each type uses different cryptography. Modern Excel 2013 and later uses AES-128 encryption for file-level passwords, while sheet-level protection still relies on a weaker hash that is straightforward to remove when you own the file and have forgotten the password.

Before diving into techniques, you should always confirm you have the legal right to unlock a given workbook. Removing protection from a file you own, or one your organization owns and has authorized you to modify, is perfectly legitimate. Bypassing protection on files belonging to others without permission, however, can violate company policy and even computer fraud laws. The methods below assume legitimate ownership, recovery scenarios, or explicit IT authorization to perform the unlock operation on the spreadsheet in question.

The good news is that for most everyday cases, you do not need third-party software at all. Excel itself provides built-in dialogs to clear any password if you currently know it. The trickier scenarios occur when the password has been lost. For sheet protection, a short VBA macro or a ZIP-file XML edit will solve it in minutes. For file-open passwords, recovery becomes considerably harder because of strong AES encryption, and your realistic options depend heavily on password length and complexity.

This article covers Excel 2016, 2019, 2021, and Microsoft 365 on both Windows and macOS, with notes where behavior differs. You will learn how to remove a known password through the standard UI, how to strip sheet protection through XML editing, how to use VBA to clear worksheet locks, and how to evaluate password recovery tools when nothing else works. We will also touch on best practices for password management going forward so you never get stuck again.

If you regularly work with locked spreadsheets, it is worth investing thirty minutes to understand each protection mechanism. Once you grasp the difference between encrypting a file and protecting a sheet, the unlock steps become obvious. By the end of this guide you will have a clear decision tree: identify the protection type, choose the right removal method, execute it in under five minutes, and document the change so colleagues are not surprised when the lock disappears.

You should also know that removing protection is reversible. After unlocking a file, you can always reapply a new password using a fresh credential that you record in a password manager. Many readers also pair this skill with related techniques like inserting drop-down lists, freezing panes for readability, and using vlookup excel formulas to clean up the data once they regain edit access. Treat protection removal as one tool in a broader toolkit for taking ownership of inherited files.

When you know the current password, removing it is a thirty-second job. For a file-open password, open the workbook normally, enter the password when prompted, then go to File > Info > Protect Workbook > Encrypt with Password. Delete every character from the password field and click OK. Save the file, and the next time it opens there will be no prompt at all. The file is now stored unencrypted on disk and any user with file access can read it freely.

For a modify password, the removal path is slightly different. Open the workbook, choose File > Save As, click the small Tools dropdown next to the Save button, and select General Options. Clear the field labeled Password to modify, then save. The new file replaces the old one and the modify lock disappears entirely. Take care to also clear the Password to open field if both were set, because users sometimes set both layers without realizing each must be cleared separately.

Worksheet protection has its own removal dialog. Click the Review tab on the ribbon, then click Unprotect Sheet. If a password was set, Excel prompts you to type it. Enter the correct password, and the lock vanishes for that particular sheet. If you have multiple sheets, you must repeat the process for each one, because protection is applied at the sheet level rather than the workbook level. The same logic applies to workbook structure protection accessed via Review > Protect Workbook.

Mac users will find the menu paths nearly identical, though sometimes the dialog appears under Tools rather than Review. On Excel for the web through OneDrive or SharePoint, you cannot remove a file-open password from the browser; you must download the file, unlock it in desktop Excel, and reupload it. Sheet protection, however, can be toggled from the web interface in most modern tenants, making it a quick option when you are away from your main workstation.

If you are removing protection on a file you plan to share, save it under a new name to preserve the original. This habit prevents irreversible mistakes when a colleague later asks why the file is no longer locked. Append a suffix like _unlocked or _editable so the change is obvious in folder listings. You can also store the cleared version in a separate folder with restricted permissions if the data is sensitive but no longer needs Excel-level encryption layered on top of it.

Sometimes the issue is not the file itself but the way Excel cached an old credential. If you keep getting prompted for a password you have already removed, close all Excel windows, clear the Office credential cache in Windows Credential Manager, and reopen the file. This resolves the rare cases where a stale token blocks a freshly cleared password. The same applies on macOS through Keychain Access where you delete entries that begin with Microsoft Office before retrying the file.

For batch removal across dozens of files, consider scripting it through PowerShell or Office automation. The script opens each file with the known password, calls Workbook.Password = vbNullString, calls each Worksheet.Unprotect with the known sheet password, and saves the file out. This approach scales to hundreds of files in a few minutes and is preferable to clicking through the UI for every workbook. Once unlocked, you can also use a formula like vlookup excel to merge data across files.

Security and legal considerations matter just as much as the technical steps. Before unlocking any spreadsheet, ask yourself three questions: do I own this file or have explicit permission from the owner, does my organization have a documented policy about password recovery, and is the data inside subject to regulatory controls like HIPAA, GDPR, or PCI-DSS that would require additional handling? Skipping these questions can turn a routine task into a compliance incident, and the wrong answer in a regulated industry can carry significant personal and corporate consequences.

In most workplace scenarios, you should route password recovery through the IT or information security team. They typically have approved tools, audit logs, and a chain-of-custody process that protects both you and the company. Trying to unlock a file with personal software on a corporate laptop may violate acceptable-use policies even when your intent is legitimate. Document any approval you receive in writing, ideally a ticket or email thread, so there is a clear paper trail if questions arise later about how the file became unlocked or who authorized it.

For personal files, the calculus is simpler but still requires care. If a spreadsheet contains sensitive personal data such as tax returns, medical records, or financial accounts, treat the unlocked version with the same caution you would apply to the encrypted one. Store it in an encrypted folder, restrict permissions, and consider re-encrypting with a new password recorded in a reputable password manager. Tools like 1Password, Bitwarden, and KeePass make it trivial to generate and store strong passwords that you will never lose again.

One subtle risk is that some password recovery tools transmit file fragments to cloud services for distributed brute-force attacks. Read the privacy policy carefully before uploading anything sensitive. The safer path is to run recovery entirely on local hardware, even if it takes longer. For truly confidential workbooks, consider whether recovery is worth the risk at all; recreating the data from source systems may be slower but eliminates the exposure of sending encrypted blobs to a third-party processor whose security posture you cannot verify.

Auditors increasingly look at Excel file handling as part of broader data governance reviews. If your team regularly removes password protection, build that into the formal procedure. Note in your data-classification scheme that any spreadsheet containing protected health information, payment data, or personally identifiable information requires the new encryption to match a corporate standard. Pair the file-level password with NTFS or SharePoint permissions so the file itself sits behind multiple layers of access control rather than relying on Excel alone.

From a forensic standpoint, removing protection is not invisible. Excel writes metadata changes into the file, and SharePoint or OneDrive version history may retain the protected original. If you are unlocking a file as part of an investigation or legal hold, coordinate with legal counsel before making any changes; even copying the file to perform recovery may alter timestamps and complicate chain of custody. In those cases, a forensic copy taken with write-blocking hardware is the correct first step, after which all analysis happens on the duplicate.

Finally, think about how protection is set in the first place. A surprising number of Excel files are locked by accident, by template settings, or by users who simply forgot they applied protection. Before assuming malicious intent or escalating to recovery tools, check whether the original author is still reachable. A quick message often produces the password in seconds and avoids the cost, time, and risk of full recovery. Knowing how to merge cells in excel and other formatting tricks also helps you understand whether the lock was applied for layout reasons rather than security ones.

Once you have successfully unlocked a workbook, take a moment to apply best practices that will prevent future lockouts and improve overall data hygiene. The single most valuable habit is to record every Excel password in a dedicated password manager immediately after setting it. This single step eliminates roughly ninety percent of future recovery work, because forgotten passwords are by far the most common reason people search for removal techniques in the first place. Treat Excel passwords with the same discipline you apply to email or banking credentials.

Beyond personal habits, consider whether Excel-level passwords are still the right tool for the job. In modern Microsoft 365 environments, Sensitivity Labels with Microsoft Information Protection provide far stronger and more auditable controls than a standalone Excel password. Labels travel with the file regardless of where it is copied, support granular permissions like view-only or edit-without-print, and integrate with data loss prevention policies. For team workbooks, replacing legacy passwords with labels usually delivers a security upgrade and a usability improvement at the same time.

For genuinely sensitive numbers, pair Excel encryption with a strong file-system control. Store the file in a BitLocker-protected drive or an encrypted cloud folder, restrict the share permissions to named users, and enable activity logging in SharePoint or OneDrive. This layered approach means that even if someone obtained the Excel file and ran a recovery tool, they would still need to defeat additional encryption and audit barriers. Defense in depth is more effective than any single control no matter how strong it appears in isolation.

Build a small library of internal templates that establish the right protection defaults for your team. A finance template might apply sheet protection on input ranges so users cannot accidentally overwrite formulas, while a reporting template might leave protection off but rely on data validation and named ranges to enforce structure. Standardizing these templates means your colleagues encounter consistent patterns, which dramatically reduces the rate of accidental lockouts caused by users guessing how a protected file is supposed to behave.

Training matters as much as tooling. Spend fifteen minutes in your next team meeting demonstrating how to set, remove, and recover an Excel password using the methods in this article. Many users have never seen the Review tab in detail and do not know the difference between sheet protection and workbook encryption. A short walkthrough removes mystery, builds shared vocabulary, and gives everyone the confidence to handle locked files without panic. Pair the demo with a written reference your team can revisit later.

Document a clear escalation path for files that cannot be unlocked. Decide in advance who in the organization can approve the use of recovery tools, who owns the licensing budget for those tools, and what data must be reviewed before recovery begins. Without this clarity, urgent requests stall while everyone tries to figure out who is responsible. A one-page runbook covering ownership confirmation, approval workflow, and tool selection cuts recovery turnaround from days to hours and avoids the all-too-common situation where the file is abandoned because no one wants to make the decision.

Finally, treat unlock skills as part of your broader Excel toolkit alongside cleanup techniques like remove duplicates excel, sort and filter operations, and Power Query connections. The most resilient analysts combine multiple skills: they can unlock a legacy workbook, clean it with the right transformations, validate the data, and republish it under modern controls within the same afternoon. That combination of skills is what turns an inherited mess into a usable asset and keeps your team's institutional data flowing even when key contributors leave.

To wrap up with a practical roadmap, here is the order you should follow whenever you encounter a locked Excel file. First, determine whether the lock is a file-open password, modify password, sheet protection, structure protection, or VBA project lock by observing what Excel prompts you to enter. Second, confirm you have the right to unlock it. Third, attempt the simplest method first, because most files yield to thirty seconds of UI clicks rather than the elaborate recovery rituals described online.

If the simple route fails because the password is unknown and the protection is sheet-level, switch immediately to the VBA macro or ZIP and XML edit approach. Both are reliable, free, and complete within minutes. Do not waste time on commercial recovery tools for sheet protection; they offer no advantage over the built-in techniques and frequently bundle unwanted software. Save the cleared file under a new name, document the change, and move on to whatever real work the data was blocking in the first place.

For file-open AES encryption with a lost password, set realistic expectations before starting. If the password is short, numeric, or based on a known dictionary word, recovery tools may succeed quickly. If the password is long and random, accept that recovery is unlikely and pivot to alternative data sources. Many organizations have backup systems, source databases, or paper records that can recreate the contents of an encrypted spreadsheet faster than any brute-force attack would ever complete on consumer hardware.

When evaluating recovery software, prefer tools with transparent pricing, local-only processing, GPU acceleration support, and a clear refund policy. Avoid free downloads from unfamiliar sites, because the Excel password recovery niche attracts a disproportionate amount of malware bundled into installers. Industry-standard tools from established vendors are inexpensive enough that the cost of a license is trivial compared with the risk of compromising your workstation with rogue software hiding inside a too-good-to-be-true free utility.

After unlocking, apply the cleanup steps that the original lock was probably hiding. Run a quick audit of the data: check for stale formulas, broken links to other workbooks, hard-coded values that should be lookups, and protected ranges that no longer make sense. Many locked files are locked precisely because their creators knew the underlying model was fragile, and removing protection without addressing the fragility just exposes the cracks. Spend fifteen minutes on quality before declaring the file ready for active use.

Establish a personal habit of saving an unprotected master copy alongside any password-protected distribution copy. The master sits in your secure folder where only you can reach it, while the protected copy goes to the shared drive. When something breaks or a password is forgotten, you reach for the master and avoid recovery entirely. This pattern works equally well for templates, monthly reports, and long-running models, and it has saved countless hours for analysts who adopted it after one painful lockout incident.

The skills you build during a password-removal session compound over time. You will learn the structure of .xlsx files, the basics of VBA, the limitations of weak cryptography, and the importance of layered security. Each of these lessons applies far beyond Excel, helping you reason about file formats and password security in general. Treat each unlock as a small training exercise, document what you learned, and you will quickly become the person on your team that everyone calls when a critical workbook will not open.