In most small offices the single most sensitive document is an Excel file with everyone's salary in it, sitting in a shared folder, protected by nothing but hope. This guide turns the video's one-minute lock into an office routine: the right lock on the file, the password held properly, and a plan for the day people change.
The technical step is the easy part, and it is the one in the video: open the payroll file, press F12, Tools, General Options, set a Password to open. That encrypts the file properly. What makes payroll protection succeed or fail in a real office is everything around that step: who knows the password, where it is written, what happens when the accountant leaves, and whether anyone is quietly relying on a lock that protects nothing.
Encrypt the actual payroll workbook with a Password to open, using the video's method, and save it as .xlsx so it gets modern AES encryption. Do this on the master file itself, not on a copy that drifts out of sync with it.
Give the file a sober name. A locked file called something neutral attracts less attention in a folder listing or an inbox than one announcing its contents, and the password prompt does the real work anyway. Then test the lock cold, close and reopen, before anyone depends on it.
The classic payroll disaster is not a hacker. It is the one person who knew the password resigning, falling ill, or simply forgetting, while the file sits encrypted and payday approaches. Prevent it structurally:
This is also the honest reason the lock is safe to use at full strength: with the record kept properly, the no-back-door nature of real encryption stops being a risk to you and stays a risk only to outsiders.
Inside the encrypted file, sheet protection still has its proper job: lock the formula columns and the structure so the monthly routine does not break the calculations. Use it for that, gladly.
But never let it be the only protection, and gently correct anyone who believes it is enough. A clerk who can open a merely sheet-protected salary file can read every salary in it; the lock only refuses edits. The same applies to emailing the file: only ever send the encrypted version, and send its password by a separate channel, never in the same mail.
Encryption is the last line, not the only one. Keep the payroll file in a folder whose permissions name the payroll roles, not the whole office share. If the file must travel, it travels encrypted, as above. Backups deserve the same thought: back up the locked file, so your backup copies inherit the protection instead of quietly storing a plain version, and keep the backup itself somewhere access-controlled.
Once a quarter, open the folder permissions and the password register and read them. Access lists rot quietly as people change roles, and a two-minute review is what catches it.
The day anyone who knew the payroll password leaves the organisation, or moves out of the payroll role, the password is retired:
This ten-minute routine is the difference between a lock that protects the office and a lock that merely decorates it.
The video sets this password on a real Excel file in about a minute, including the confirmation step and the save.
Watch Full VideoBoth should reach it through the same controlled record, the office password manager entry or the sealed envelope, and both should be named in it. What they should not do is spread it further by chat or mail for convenience. Every extra copy of the password in an inbox is a permanent, searchable leak waiting for a forward.
No, and no tool honestly can either, if the password was a decent one. The file-open password is real encryption with no back door. This is exactly the disaster the owner-plus-deputy record exists to prevent. If the password was never recorded anywhere, the remaining options are the ones in the forgotten-password guide in this series: hunting for an older unlocked copy, or guessing if the password was weak.
Yes, and the simplest way is to back up the already-locked file, so the backup carries the same encryption automatically. A backup that stores a plain version undoes the lock for anyone who can reach the backup. Keep the backup access-controlled too, and keep each period's password in the record so old backups stay openable by the office.