Locked out of your own Excel file? It happens more than you'd think. Maybe you set a strong password six months ago and your password manager glitched. Maybe a colleague who left the company protected a shared budget. Maybe you inherited a workbook from a predecessor who never documented anything.
The fix depends on three things: which kind of password you're dealing with, whether you still know it, and what Excel version created the file. There are three different password types in modern Excel — workbook open, workbook structure, and sheet protection — and each one needs a different removal approach.
This guide walks through every legitimate method. Start with the simplest. If you know the password, you're 30 seconds away from done. If you don't, the modern .xlsx ZIP trick handles sheet-level protection for free. Only the file-open password requires paid tools — and even then, success isn't guaranteed.
Fair warning: there's no magic registry tweak or hidden command that bypasses Microsoft's encryption. Anyone selling you a $5 "instant unlock" tool is either lying or running malware. Real recovery means real cryptography. Sometimes it works in minutes. Sometimes it takes weeks. Sometimes the file stays locked forever.
The good news? Roughly 70% of how to password protect an excel file situations end up being sheet or structure protection — both of which are removable for free with the methods below. The other 30% are file-open passwords, where your odds depend entirely on password complexity.
Let's start with the easiest scenario: you know the password and just want it gone.
Encrypts the entire file with AES-256. You see a password prompt before Excel even opens the document. This is the strongest protection.
Prevents adding, deleting, hiding, or renaming sheets. The file opens normally — you just can't change the workbook structure.
Locks specific cells or the entire sheet from editing. Most common kind. Doesn't encrypt anything — just blocks UI changes.
If you remember the password, this is trivial. Open the file, enter the password when prompted, then strip it out.
Open Excel, then enter your password when the prompt appears. Once the workbook is open, click File → Info → Protect Workbook → Encrypt with Password. A dialog appears showing dots representing your current password. Clear that field completely. Click OK. Save the file with Ctrl+S.
That's it. Reopen the file to confirm — no password prompt should appear. If one does, you forgot to save, or you saved to a different location. Check the file path in the recent files list.
If the File → Info route doesn't work (sometimes the Encrypt option is greyed out in older versions), use Save As instead. Press F12 to open the Save As dialog. Look for the Tools dropdown next to the Save button — it's easy to miss. Click it. Choose General Options. You'll see two password fields: one for opening, one for modifying. Clear both. Click OK, then Save.
This Tools menu has been hiding in Save As since Excel 2003 and almost nobody uses it. It works in every version including Excel for Mac. Worth bookmarking mentally — it's also where you set passwords in the first place if you prefer the dialog approach over the ribbon.
Once the password is removed, you can safely close and email the file. Compare your approach with how to password protect excel file if you want to re-protect with a fresh password later.
Double-click the .xlsx in File Explorer or use File → Open inside Excel. Enter your password when prompted.
Go to File → Info. The Protect Workbook tile shows a yellow warning bar if the file is encrypted.
Click Protect Workbook → Encrypt with Password. The current password appears as dots.
Select the entire dotted string and press Delete. Leave the field completely empty.
Click OK. The yellow warning bar should disappear. Press Ctrl+S. Close and reopen to verify no prompt appears.
Sheet protection is the most common kind. Someone locked the worksheet so you can't edit formulas or change formatting. If you know the password, removing it takes one click.
Open the workbook. Click the Review tab on the ribbon. You'll see Unprotect Sheet (it'll be greyed out if no protection exists). Click it. Enter the password. Done.
If multiple sheets are protected, repeat for each one — Excel doesn't have a built-in "unprotect all sheets" command in the standard ribbon. You can write a quick VBA macro to do it (Alt+F11, paste a loop through Worksheets, run it) but for most files it's faster to click through each tab.
Same idea, different button. Click Review tab, then Protect Workbook (the button toggles on/off — if it's currently highlighted, the workbook is protected). Click it. Enter the password. The button un-highlights. Save.
Workbook structure protection blocks you from adding, deleting, hiding, or renaming sheets — but it doesn't prevent editing data inside existing sheets. That's a common misunderstanding. If you can't edit cells, you're dealing with sheet protection, not workbook structure protection. Different beast, different fix.
The how to unprotect an excel file walkthrough covers the full UI for both. For deeper cell-by-cell control, the how to unprotect cells in excel guide explains how Locked-cell formatting interacts with sheet protection.
Two possibilities. Either the sheet isn't actually protected (the button only activates when there's something to unprotect), or you're viewing the file in Protected View — Excel's read-only sandbox for files from the internet. Look for the yellow Enable Editing bar at the top of the window and click it. The Review tab buttons should activate once Excel exits Protected View.
Another edge case: shared workbooks. If the file is in legacy shared mode (Tools → Share Workbook in older versions), some protection commands are disabled. Stop sharing first via the same menu, then unprotect, then re-share if needed. Modern co-authoring through OneDrive or SharePoint doesn't have this limitation.
Review tab → Protect Sheet. Enter a password (optional — you can protect without one for soft protection). Choose which actions stay allowed: Select cells, Format cells, Insert rows, Sort, etc. Default settings block almost all editing. Click OK. Re-enter password to confirm. Save the file.
This is the protection your colleagues hit when they say "the cells won't let me type."
Review tab → Unprotect Sheet. Enter password. The button text flips from "Unprotect" back to "Protect." Repeat for each protected tab in the workbook. To verify removal worked, try to type in a previously locked cell — it should accept input without complaint.
File → Info → Protect Workbook → Encrypt with Password. Type the password, confirm it. Save. The next time the file opens, anyone needs that password to read it. This is the AES-256 encryption — the strong stuff.
Different from Review tab's Protect Workbook button, which only locks workbook structure, not encryption.
File → Info → Protect Workbook → Encrypt with Password. Delete the password field. Click OK. Save. Verify by closing and reopening — no prompt should appear. The yellow Protect Workbook warning bar disappears.
This is the one everyone wants to know. You forgot the password. The file is locked. You don't want to pay for a tool. There's a free method that works — but only for certain types of protection.
The trick exploits a fact most people don't know: modern Excel files (.xlsx, .xlsm, .xltx — anything from Excel 2007 onward) are actually ZIP archives containing XML files. Rename the extension to .zip and you can open them with any unzipper. Inside, the protection passwords for sheets and workbook structure are stored as plain references in XML. Delete the reference, re-zip the file, and the protection is gone.
This works for sheet protection passwords and workbook structure passwords — the kinds set via the Review tab. Both store their protection state as XML elements that can be edited or deleted.
The ZIP method does not work on the file-open password (the AES-256 encryption set via File → Info). When that password is set, the entire ZIP contents are encrypted as a single blob — you can't even open the file as a ZIP without the password. If your file shows a password prompt before any content appears, the ZIP trick won't help. Skip to Method 4.
Make a backup copy first. Always. If you mangle the XML, the original is your safety net. Then rename the file extension from .xlsx to .zip. Windows might warn you about changing extensions — click Yes. (If you don't see extensions, enable them: View tab in File Explorer → check "File name extensions.")
Right-click the .zip and choose Extract All, or open it with 7-Zip and copy out the contents. Inside the extracted folder, navigate to xl/worksheets/. You'll see sheet1.xml, sheet2.xml, etc. — one file per worksheet. Open the sheet you want to unprotect in Notepad or VS Code.
Search for the string sheetProtection. You'll find a tag like <sheetProtection password="CAB1" sheet="true" objects="true"... /> with various attributes. Delete the entire tag from the opening < to the closing />. Save the file. Repeat for any other protected sheets.
For workbook structure protection, the same trick applies to xl/workbook.xml. Find and delete the <workbookProtection ... /> tag. Save. Now zip everything back up — important: zip the contents of the folder, not the folder itself. The top level of the ZIP should be [Content_Types].xml, _rels, docProps, and xl. Rename the .zip back to .xlsx. Open in Excel — protection gone.
Two common failure modes:
1. Excel says "file is corrupt" on reopen. Almost always a zipping mistake. The folder structure inside the ZIP must match the original exactly. Open the original .xlsx as a ZIP, look at the root level, and replicate it. Don't include the parent folder in the ZIP — zip the contents only.
2. The sheet is still protected after the fix. You may have missed a sheetProtection tag in another sheet, or workbook-level protection is still active. Re-check every sheet#.xml file and workbook.xml. Some files have protection set at multiple levels.
If the file shows a password prompt the second you double-click it — before Excel even loads UI — that's the encrypted file-open password. The ZIP method physically cannot help. You need Method 4.
If your file has the AES-256 file-open password and you've forgotten it, your only real option is professional password recovery software. These tools attempt to crack the encryption by trying millions of passwords per second using your GPU. Success depends entirely on how complex the original password was.
The established players: Passper for Excel (around $30 for a single-file license), iSeePassword Excel Password Recovery (around $50), PassFab for Excel (around $40), and Stellar Phoenix Excel Password Recovery (around $90 for full features). All four support dictionary attacks, mask attacks (if you remember partial info — like "started with capital S, had 8 digits"), and brute force as a last resort.
A 6-character password with mixed case and digits has roughly 56 billion combinations. A consumer GPU runs through these in 2–10 hours depending on the card. An 8-character password balloons to 218 trillion combinations — that's 3–4 weeks on the same GPU, sometimes longer. A 12-character random password with symbols is effectively uncrackable on consumer hardware. You're looking at years, possibly centuries.
Hint attacks help. If you remember the password started with "Budget" and had the year somewhere, set up a mask attack — that drops the search space from quintillions to maybe a million combinations. Solvable in minutes.
Free "Excel password remover" tools advertised on shady sites are almost universally either ineffective demos that hide a $50 paywall after "finding" the password, or actual malware. Stick to the four names above or established names like Elcomsoft (enterprise-grade, more expensive). For deeper protection workflows, the how to remove password protection in excel reference covers each scenario.
Quick history. Excel 97-2003 used a weak 40-bit RC4 cipher. Old tools could crack those files in seconds because the keyspace was tiny — only a trillion keys, trivial for a modern GPU. That era of "instant Excel password recovery" tools survived in marketing for decades after they stopped being useful.
Office 2007 added AES-128. Better, but still crackable for short passwords. Office 2013 jumped to AES-256 with 100,000 SHA-512 hash iterations per password attempt. That iteration count is the real defense — it forces every password guess through 100,000 rounds of hashing before comparison. On a top-tier GPU, you can try maybe 200,000 passwords per second instead of the billions per second possible against older formats.
The math gets brutal fast. A 10-character random password (mixed case, digits, symbols) has roughly 7×10^19 combinations. At 200,000 attempts per second, that's 11 million years. Even with a server farm of 1,000 GPUs, you're at 11,000 years. Not happening.
This is why some passwords are genuinely unrecoverable. There's no magic. If you set a strong password on a 2013+ Excel file and forgot it, that data may be gone forever. Backups become extremely important for any sensitive Excel work — see the repair excel file guide for related recovery scenarios.
Even law enforcement and forensic firms rely on the same brute-force tools. They have access to GPU clusters and side-channel attacks, but the cryptographic math is identical. They succeed when passwords are weak, when there's a keylogger record, when the password is in a leaked database, or when the user wrote it on a sticky note. The encryption itself isn't broken — the humans around it are.
What this means practically: if your password was random and 10+ characters, accept that the file may stay locked. Move on. If your password was a dictionary word, a phrase, or based on personal info, recovery tools have a real chance. Try Method 4 with mask attacks reflecting whatever fragments you remember.
The best fix for forgotten passwords is never forgetting them. Three habits that prevent 95% of future lockouts:
Bitwarden, 1Password, Dashlane, LastPass — pick one and use it. When you set an Excel password, save it to your vault with the file path or a descriptive name. Cost: $0–$5/month. Time saved over a career: easily dozens of hours of frantic searching and paid recovery attempts.
The vault entry should include: file location, password, date set, who else needs access, and ideally a hint about what the file contains. Future-you will thank past-you when you're staring at a locked workbook from 2027.
If you set a password on a shared business file, that password needs to live somewhere your team can find it. Personal password manager won't help if you leave the company. Use a team vault (Bitwarden Teams, 1Password Business) or document it in a corporate password management system. Never just "keep it in your head" for shared work — that creates the exact predecessor-left-locked-files problem this guide solves.
Excel auto-recovery is great but inconsistent. For any important workbook, save copies to OneDrive, Google Drive, or Dropbox with version history. If you accidentally lock yourself out of v3, you can roll back to v2 (which had no password) and re-do the changes. The how to recover unsaved excel files guide explains the AutoRecover flow, and the excel file recovery reference covers broader recovery scenarios.
One more thing: don't password-protect files that don't need it. Sensitive financial data, HR records, contracts — yes, protect those. Random meeting notes, public datasets, draft templates? Skip the password. Every protected file is a future lockout risk. Match protection level to actual sensitivity.
Excel passwords aren't always the right tool. For team files, file-system permissions (Windows ACLs, SharePoint permissions, Google Drive sharing) handle access control better. Only authorized users can see the file at all — no password to forget. For truly sensitive data, an encrypted folder via BitLocker or VeraCrypt protects everything inside without per-file passwords. Excel's built-in protection is fine for casual confidentiality but rarely the strongest option in a corporate environment.
It depends on which password type. If it's a sheet protection or workbook structure password, use the ZIP/XML method (Method 3 above) — completely free, works in minutes by editing the XML inside the .xlsx file. If it's a file-open password (the AES-256 one that prompts before Excel opens the workbook), you'll need paid recovery software like Passper or PassFab. Success isn't guaranteed for strong passwords — 12+ character random passwords are effectively uncrackable.
The ZIP method is safe if you make a backup copy first. The technique just edits XML inside the file — no exotic operations. Common failure modes: re-zipping incorrectly (zip the contents, not the parent folder), saving the XML with the wrong encoding, or accidentally deleting more than the sheetProtection tag. With a backup, any mistake is recoverable — just start over from the copy. Never modify the only copy of an important file.
Yes, for sheet protection and workbook structure passwords. The ZIP/XML method uses only built-in Windows tools (File Explorer to rename and zip, Notepad to edit XML). No purchase, no download, no installation. For file-open AES-256 passwords, you need either the original password or third-party recovery software — no built-in workaround exists. Microsoft deliberately made it that way for legitimate security reasons.
Hours to forever, depending on password complexity. A 6-character mixed-case password: 2–10 hours on a modern GPU. An 8-character password with symbols: 3–4 weeks. A 12+ character random password: years to centuries — effectively impossible. If you remember partial details (length, starting characters, included words), mask attacks dramatically reduce time. Set up the mask in Passper or iSeePassword before kicking off the full attack.
Three likely causes. First, you removed the workbook structure password but not the file-open password, or vice versa — Excel has multiple independent password layers. Check File → Info → Protect Workbook and also Review → Protect Workbook. Second, you saved the file to a different location and you're opening the old copy. Third, the password is on a linked workbook, not the current one. Look at the prompt text carefully — it should tell you which file needs the password.
Not really. Hashcat is a legitimate free password-cracking tool used by security researchers, but it requires command-line skills, careful hash extraction from the Excel file, and the same GPU time as commercial tools. For most users, the time investment isn't worth the $30 savings. Anything advertised as a "free instant Excel password remover" on random websites is almost certainly malware or a fake demo that demands payment after pretending to find your password.
It's legal when you own the file or have authorized access. Removing a password from your own file: completely fine. Removing it from a company file with manager or IT approval: fine. Removing it from someone else's file without permission: potentially illegal under the Computer Fraud and Abuse Act in the US or Computer Misuse Act in the UK, with penalties up to multiple years in prison. Always get written authorization for work files — verbal permission is hard to prove later.
Sheet protection blocks UI editing — it prevents you from typing into cells, changing formulas, or formatting through Excel's interface. The underlying file is unencrypted; you can still see all the data, formulas, and macros if you open the file as a ZIP. File encryption (the file-open password) actually scrambles the entire file contents with AES-256. Without the password, the contents are mathematically inaccessible — not just hidden by the UI, genuinely encrypted bytes.