How to Unprotect an Excel Spreadsheet: The Complete 2026 Guide to Removing Worksheet and Workbook Protection

Knowing how to unprotect Excel spreadsheet files is one of the most practical skills any analyst, accountant, or office professional can learn in 2026. Whether you inherited a workbook from a colleague who left the company, downloaded a template that locked you out of essential cells, or simply forgot the password you set six months ago, the inability to edit a protected sheet can halt your work entirely. The good news is that Excel offers multiple legitimate paths to remove protection, each suited to a different scenario and security level.

Excel protection comes in several distinct flavors, and understanding the difference is critical before you attempt any unlock procedure. Worksheet protection prevents users from editing specific cells, rows, or columns on a single tab. Workbook protection restricts structural changes like adding, deleting, hiding, or renaming sheets. File-level encryption requires a password just to open the workbook, while read-only marking is a softer suggestion that any user can bypass by saving a copy. Each layer is removed differently.

The most common request from Excel users involves removing password protection from a single worksheet they own or have authorization to modify. Microsoft built straightforward menu commands for this purpose, but they only work when you remember the original password. If the password is lost or unknown, you have additional options including XML manipulation, VBA scripts, and third-party recovery utilities, though each carries trade-offs in time, cost, and ethical considerations that we will explore in depth throughout this guide.

Before diving into specific methods, it is worth noting that Excel protection was never designed as serious security. Microsoft has been transparent that worksheet and workbook passwords are convenience features intended to prevent accidental edits, not to safeguard sensitive data. For true confidentiality, the file-open password using AES-256 encryption is the only mechanism that resists modern cracking tools, and even that depends on password strength. Treat in-sheet protection as a polite barrier, not a vault.

This guide walks through every realistic scenario you might encounter, from the simple two-click unlock on a sheet where you know the password, to the more involved XML approach for legacy XLS files, to handling shared workbooks with multiple protection layers stacked on top of one another. We will also cover what to do when an entire workbook refuses to open due to file-level encryption, and how to deal with sheets protected by Information Rights Management policies enforced by your employer.

Along the way, you will learn how Excel stores protection data inside the underlying XML structure of modern .xlsx files, why renaming a workbook to a .zip archive is one of the fastest legitimate recovery techniques, and how to use Visual Basic for Applications to programmatically remove protection on sheets where the original password has been forgotten. Every method here assumes you have legal authority to modify the file in question — using these techniques on files you do not own can violate corporate policies or copyright law.

By the end of this guide you will be able to identify the type of protection on any spreadsheet within seconds, choose the right removal method based on your situation, and execute the steps confidently without risking data loss. Bookmark this page, because the techniques covered here apply to Excel 2016, 2019, 2021, Excel 365 for Windows and Mac, and even Excel for the web in most cases. Let's begin with what makes Excel protection tick under the hood.

The simplest scenario by far is unprotecting an Excel spreadsheet when you already know the password. Most users encounter this when they protect their own workbooks for safekeeping and then need to make legitimate edits weeks or months later. Open the file, navigate to the Review tab on the ribbon, and look for the Unprotect Sheet button in the Protect group. If the active sheet is protected, that button appears highlighted. Click it, type the password when prompted, and press Enter. The protection is removed instantly, and you regain full edit access.

If the workbook structure itself is locked — preventing you from adding, deleting, or rearranging sheets — you need to click Unprotect Workbook on the same Review tab. This is a separate protection layer from sheet protection, so removing one does not automatically remove the other. Many enterprise templates use both simultaneously, which can confuse users who unlock the sheet but still cannot insert a new tab. If functions like vlookup excel formulas reference cells across sheets, you may need to unlock multiple tabs to restore full editability.

For workbooks shared via OneDrive or SharePoint, the Unprotect commands may behave differently depending on whether co-authoring is active. If multiple users have the file open, Excel sometimes disables protection changes until you take exclusive ownership. Close the file, ask other collaborators to close their copies, and reopen it solo before attempting removal. The desktop application gives you the most reliable control, so avoid trying these steps in Excel for the web when possible — the browser version has limited protection management.

Mac users follow nearly identical steps in Excel for Mac 2021 and Excel 365 for Mac. The Review tab houses the same Unprotect Sheet and Unprotect Workbook buttons, though the exact ribbon layout differs slightly between versions. If you use Excel on Mac frequently, the keyboard shortcut Cmd+Option+R brings up the Review options menu where you can quickly access protection commands. Mac and Windows files are fully cross-compatible, so a file protected on one platform unprotects normally on the other.

One frequently overlooked detail involves case sensitivity. Excel passwords are case-sensitive, so a password set as Spreadsheet2024 will fail if you type spreadsheet2024 or SPREADSHEET2024. Check your Caps Lock indicator before submitting, and if a password fails repeatedly, try common variations like the leading letter capitalized or lowercase. Some users also accidentally include trailing spaces, especially when copying from a password manager. Trim any whitespace before pasting and the protection should lift on the first attempt.

After successful removal, Excel does not display a confirmation banner. The change is silent, but you can verify by clicking into any cell and typing — if your keystrokes appear, protection is gone. Save the file immediately so the unprotected state persists. If you accidentally close without saving, the protection returns the next time you open the file, because the encrypted state still exists in the saved version on disk. Saving overwrites that protected version with your new unlocked copy.

Finally, remember that the Review tab is also where you re-apply protection if you want to share the workbook with new restrictions. Excel lets you specify exactly which actions users can perform on a protected sheet, including selecting locked cells, formatting columns, sorting, using autofilter, and editing objects. The default protection settings block almost all edits, so loosening these checkboxes lets you publish a useful template that still prevents accidental formula damage. This balance is the entire point of sheet protection in modern workflows.

When the password is lost, forgotten, or never documented in the first place, you face a recovery scenario rather than a simple unlock. The good news is that worksheet and workbook protection in modern .xlsx files can be removed without the original password through a clean XML editing technique that takes about five minutes and requires only built-in Windows or Mac tools. This approach works because .xlsx files are actually ZIP archives containing XML documents, and the protection setting lives in a plain-text tag you can simply delete.

Start by making a copy of the locked workbook and renaming the extension from .xlsx to .zip. Windows may warn you that changing the extension could make the file unusable — confirm the change. Right-click the renamed file and choose Extract All to unpack the archive into a folder. Inside, navigate to the xl subfolder and then to the worksheets folder. Each protected sheet appears as a separate XML file named sheet1.xml, sheet2.xml, and so on. Open the relevant sheet in Notepad or any plain-text editor.

Search the XML for a tag that begins with sheetProtection. You will see a line that looks something like sheetProtection algorithmName=SHA-512 hashValue=... followed by various attributes ending in a closing slash and angle bracket. Delete the entire tag from the opening less-than symbol through the closing greater-than symbol. Save the XML file, then re-zip the entire folder structure preserving the original layout. Rename the zip back to .xlsx and open it in Excel. The sheet is now fully unprotected with no password required.

This XML technique only works for .xlsx, .xlsm, and .xlsb files created in Excel 2007 or later. For legacy .xls files from Excel 2003 and earlier, you need a different approach using VBA. Open the locked workbook, press Alt+F11 to launch the Visual Basic Editor, insert a new module, and paste a publicly available password-bypass macro that brute-forces the simple 16-bit hash. The macro runs in under a minute on any modern computer and prints a working unlock string that you can paste into the standard Unprotect Sheet dialog.

For file-level encryption, neither the XML trick nor VBA macros will help. AES-256 is mathematically secure, and the only realistic options are dictionary attacks using software like PassFab for Excel, Excel Password Recovery Lastic, or Passware Kit, which try millions of common passwords per second on GPU hardware. Success depends entirely on password complexity — a six-character lowercase password might crack in hours, while a fifteen-character random string would require centuries. Set your expectations accordingly before purchasing recovery software.

Some organizations enforce protection through Information Rights Management or Microsoft Purview labels that survive even after you remove standard Excel protection. These policies tie file access to your Azure Active Directory identity, and removing them requires either contacting the original sender to grant new permissions, asking your IT department to lift the policy, or having an administrator with the appropriate role override the restriction. No third-party tool can bypass properly-configured IRM because the encryption keys live on Microsoft servers, not in the file itself.

Finally, always consider the ethical and legal dimensions of password recovery. Removing protection from a file you legitimately own is generally fine, but bypassing protection on files belonging to your employer, a client, or any third party may violate the Computer Fraud and Abuse Act in the United States or equivalent laws elsewhere. When in doubt, get explicit written permission before applying these techniques to any file you did not personally create and protect.

For users comfortable with advanced techniques, two additional methods deserve detailed coverage: direct XML manipulation using PowerShell or terminal scripting, and VBA-based protection removal for sheets where macros are permitted. Both approaches scale well when you have multiple protected workbooks to process, and they avoid the cost and security concerns of third-party recovery software. Let's start with PowerShell on Windows, which can automate the XML editing process across an entire folder of protected files in a single command.

The PowerShell approach uses the built-in Compress-Archive and Expand-Archive cmdlets to unpack each .xlsx file, then a simple regular expression search-and-replace to strip the sheetProtection tag from every sheet XML inside the archive. After the modification, the script repacks the archive and restores the .xlsx extension. A well-written script can process dozens of files in under a minute, which makes it the preferred method for IT administrators inheriting large libraries of protected templates from departed employees. The technique also works on Mac and Linux using zip and unzip utilities with sed for the replacement.

VBA offers a different angle by running protection removal inside Excel itself. The classic password-bypass macro generates candidate passwords by iterating through combinations of two-character strings and ASCII control characters, exploiting the weakness in Excel's old 16-bit hash to find a string that produces the same hash as the unknown original. The macro then uses that synthesized password to call ActiveSheet.Unprotect, achieving the same effect as if you had typed the real password into the dialog box. The technique works on .xls, .xlsm, and older .xlsx files.

One advanced scenario involves shared workbooks with track changes enabled and shared protection applied through the legacy Share Workbook feature. This older sharing model, which Microsoft has deprecated in favor of co-authoring, layers an additional protection mechanism on top of sheet and workbook protection. To remove it, you must first un-share the workbook by going to Review then Share Workbook and unchecking the box that allows multiple users to edit simultaneously. Only then can you access the standard Unprotect commands without errors.

If your workbook uses tables, pivot tables, or external data connections, protection may interact with these features in unexpected ways. A protected sheet containing a pivot table sometimes blocks refresh operations even when the underlying data is in a separate unprotected sheet. Similarly, protected sheets with how to merge cells in excel formatting can produce mysterious errors when you try to insert rows below the merged region. Removing protection resolves these issues immediately, restoring full table and pivot functionality.

For Mac users on the latest Excel 365 versions, the XML editing technique works identically but uses Finder's built-in archive utility instead of Windows Explorer. Right-click the renamed .zip file and choose Open With Archive Utility, then navigate to the extracted folder and edit the sheet XML in TextEdit or any code editor. After saving changes, select all files in the extracted folder, right-click, and choose Compress to create a new .zip, which you then rename back to .xlsx. The Mac workflow takes about the same time as the Windows approach.

Beyond protection removal, consider whether the original protection served a legitimate purpose. If the protected sheet contained complex formulas that previous users had broken by typing into formula cells, simply removing protection re-exposes that risk. Better practice is to redesign the template with named input ranges, data validation rules, and visible color cues that guide users to safe edit zones, then re-apply protection with a stronger password and document it in your team's shared password manager so the next person who inherits the file has a clean path to legitimate access.

Now that you have the technical knowledge to unprotect any Excel spreadsheet in your possession, let's cover the practical workflow that experienced power users follow to avoid running into protection problems repeatedly. The single most valuable habit is documenting every password you create at the moment you create it. Use a dedicated password manager like 1Password, Bitwarden, or Keeper to store workbook passwords alongside the file path and a brief note explaining what the protection covers. This three-second habit eliminates ninety percent of future recovery scenarios.

When you build templates that others will inherit, design them with the next user in mind. Add a hidden sheet named ReadMe that contains the workbook's purpose, the location where input cells live, the contact person for password resets, and a non-sensitive hint that helps the next user remember credentials without exposing them. Many large organizations maintain a centralized template library where each protected workbook has corresponding documentation in Confluence, SharePoint, or a similar wiki, ensuring institutional knowledge survives staff turnover and minimizing emergency unlock requests to the IT team.

Consider tiered protection strategies based on actual risk. For sheets containing only formulas and structure you want to preserve, use a simple memorable password and document it openly — the goal is preventing accidents, not securing secrets. For sheets containing genuinely sensitive data, do not rely on Excel protection at all. Instead, store the file in a restricted SharePoint or OneDrive folder with permission controls, apply Microsoft Purview sensitivity labels that enforce encryption automatically, and audit access through your tenant's compliance center. This separates security concerns from convenience concerns.

When unprotecting inherited workbooks, take the opportunity to refactor the file before re-protecting. Move all input cells into a single Input sheet, all calculations into a Calc sheet, and all outputs into a Dashboard sheet. Apply data validation to input ranges, name every important range using the Name Manager, and add input prompts and error alerts so users understand what valid data looks like. The result is a template that is easier to use, harder to break, and simpler for the next inheritor to maintain — even if they never need to unlock anything.

For frequent Excel users, learn the keyboard shortcuts that streamline protection management. Alt+R+P+S opens the Protect Sheet dialog instantly in Windows, Alt+R+P+W opens Protect Workbook, and Alt+R+P+S again (when a sheet is already protected) triggers Unprotect Sheet. On Mac, the equivalent ribbon shortcuts use the Cmd+Option modifier with the same letter sequence. These shortcuts make protection toggling so fast that you can apply temporary protection during a working session and remove it just as quickly when you're done.

If you maintain a portfolio of protected workbooks for finance, accounting, or operations work, schedule a quarterly review where you open each file, verify the password still works, refresh documentation, and confirm the protection scope still matches the workbook's purpose. This proactive maintenance catches drift — situations where someone has added new sheets that aren't protected, or where formulas have crept into cells the original designer intended to leave editable. A thirty-minute quarterly review prevents emergency unlock scenarios months later.

Finally, when teaching others to use protected workbooks, explain why the protection exists rather than just where the unprotected cells are. Users who understand that locked formula cells preserve the integrity of multi-million-dollar financial models are far more careful with the workbook than users who simply see protection as an obstacle. Cultural buy-in around the purpose of Excel protection is ultimately more valuable than any technical password strategy, because it converts every user into a guardian of the workbook's integrity rather than a potential source of damage.