It is a common office emergency: an important Excel file is password locked, the employee who set the password has left, and everyone is looking at the person who knows computers. The technical part of this problem is often easy. The part that protects you, your job and the company is doing it in the right order, starting with written authorisation.
When a locked file belongs to a workplace, the password is only half the problem. The other half is authority: whose file is it, who may open it, and who asked you to. A recovery done as a quiet favour can look, later, exactly like unauthorised access. This guide gives the defensible order of operations: authorisation in writing, the honest internal routes that solve most cases without any tools, classifying the lock, and only then the recovery itself, with a paper trail at every step.
The file belongs to the organisation, and opening it is an organisational act. Get the request in writing, an email from the owner, a director or HR is enough, naming the file and the business reason. That one message does three things: it proves you were asked, it makes the decision belong to management where it belongs, and it starts the audit trail you will add to as you work. If anyone suggests skipping this because it is urgent or because you are trusted, treat that as a reason to insist, politely and in the same email thread. Urgency plus no record is exactly how innocent help gets reinterpreted later.
Before any tool, exhaust the routes that involve no recovery at all. If the former employee is reachable and relations are decent, ask them: most people hand over a work password when their former employer asks properly, and it is the fastest clean answer. Check whether the password was recorded anywhere legitimate: a handover note, the office password manager, an envelope in the safe. Check for earlier copies of the file: email attachments from before the password was added, cloud version history, backups. In practice, the majority of these emergencies end at one of these steps, which is why skipping them for a tool is both riskier and often slower.
If recovery is genuinely needed, identify the lock before promising anything. If the file opens and only a sheet is protected, the outcome is quick and certain: protection can be removed from a copy, as the XML guide in this series shows. If the file demands a password before opening, it is encrypted, and management deserves the honest briefing from the file-open guide: guessing may work if the password was weak or partly known, and may never work if it was strong. Say that in the same email thread, before starting. An honest maybe, recorded early, protects everyone; a confident promise that fails looks like incompetence or worse. And one boundary is absolute: never upload the company file to an unlock website, however urgent it feels. That converts a password problem into a data breach.
Recovery is not finished when the file opens. Record what was done in the thread: which route worked, who received the opened file. Set a new password chosen by the current owner of the file, and record it in the office system, password manager or sealed envelope, the same day. Then ask the wider question while everyone is paying attention: what else did the departed employee lock? Other files, admin accounts, cloud drives and devices should be inventoried and rotated as part of the same exit process, so next month does not repeat this month. The lasting fix for the locked-file emergency is not a better recovery tool; it is the handover and password system described in the prevention guide in this series.
The video shows this recovery on a real file, step by step, including which password type it works on.
Watch Full VideoAsk for it in one line of email or chat and wait the two minutes it takes. A written request protects you if questions come later, and it costs the manager almost nothing. If the request is legitimate, nobody reasonable refuses to write it down. Treat reluctance to record the request as important information, and do not proceed on a verbal say-so for someone else's locked file.
Usually you do not need to make anyone do anything. A polite, formal request from the company, explaining the file is company property needed for continuity, succeeds in most cases, and HR or the owner is the right sender. If they refuse or are unreachable, the documented recovery routes in this series are your path, and the refusal itself becomes part of the record. What you should not do is guess at their personal passwords or touch anything personal of theirs.
The truth, with the paper trail: authorisation was obtained, internal routes were exhausted, the lock was real encryption, and the password was strong enough that guessing is not a realistic route, which is the same property that protected the data while the employee had it. The practical next step is rebuilding the data from bank statements, invoices, Tally or other records. It is a painful answer, and it is exactly why the exit checklist and password recording system exist, so the company hears it once, not every year.