Excel offers passwords in five different places, and only one of them actually encrypts your data. The other four are courtesy locks that stop accidents. Confusing them in either direction is expensive: people panic over a lock that removes in minutes, and trust a lock that protects nothing.
Most password confusion in Excel comes from one mistake: treating every password box as the same lock. It is not. A password on a sheet and a password on the file behave completely differently, are stored completely differently, and protect against completely different threats. This guide walks through all five places Excel asks for a password, states honestly what each one really does, and shows you how to tell which one is standing between you and your own file.
Set through File, Info, Protect Workbook, Encrypt with Password, this password changes what the file physically is. The whole workbook, every sheet, every value and formula, is encrypted with AES, and Excel wraps it so that the file cannot even be opened for reading without the password. Modern Excel also runs the password through a deliberately slow key derivation, hundreds of thousands of hash rounds, precisely so that guessing is expensive.
Use this lock when the file itself is sensitive: salary sheets, ledgers, price lists, anything you would not want read if the file leaks. And respect what it means for you: if this password is forgotten, there is no recovery in the sense of finding it. There is only guessing, and guessing only defeats passwords that were weak or partly remembered.
Hidden in Save As, Tools, General Options, the Password to modify lets anyone open the file read-only and asks for the password only if they want to edit and save over it. The content is not encrypted. A person without the password can open the file, read everything, and save their own copy under a new name. It protects the master copy from casual overwriting, nothing more.
Offices trip over this one in both directions: they believe a modify password keeps a file secret (it does not), and they panic when it is forgotten (there is nothing to panic about, the data was never locked away).
Protect Sheet and Protect Workbook, both on the Review tab, guard against the everyday disaster: a colleague typing over a formula, inserting rows into a format that must not change, deleting or renaming a sheet the accounts department depends on. Excel stores these as protection settings inside the file. Anyone who can open the file can read all the data; the protection only blocks changes through the Excel interface.
Because the data is not encrypted, a forgotten sheet password is a small problem with a reliable solution on your own file: the protection marker can be removed, which is covered step by step in the companion guide on removing sheet protection through the file's XML. No guessing, no tools that phone home, no drama.
Locking a VBA project for viewing feels serious, because the code disappears behind a password box in the editor. Honestly graded, it belongs to the courtesy family too. The password is a check the editor performs, not encryption of your data, and on your own file it can be dealt with the same way as the other protection flags. It is perfectly fine for keeping curious hands out of your macros. It is not a way to keep secrets from a determined person, and it should never be the only protection on anything valuable.
The prompt tells you the truth if you read it carefully. A box that appears before the file opens and says the password is needed to open the file means encryption. A file that opens but shows a read-only banner, or opens when you choose Read Only, is the modify password. A file that opens normally but shows an Unprotect Sheet button on the Review tab is sheet protection. Read the screen before reaching for any tool, and you will already know whether your recovery is a two-minute removal or an honest guessing effort.
The video shows this recovery on a real file, step by step, including which password type it works on.
Watch Full VideoNo. That behaviour is the password to modify, set in Save As, Tools, General Options. The file content was never encrypted, anyone can read it, and they can save an editable copy under a new name. Only the Encrypt with Password option, under File, Info, Protect Workbook, actually encrypts a workbook.
No. Sheet protection stops editing through the Excel interface; it does not hide or encrypt anything. Anyone who can open the file can read every value, and the formulas are protected only from being changed, not from being seen by someone determined. For real secrecy you need the file-open encryption password, or to keep the file somewhere private.
No. It is a courtesy lock in the same family as sheet protection: a check the editor performs, not encryption. It keeps honest and curious users out, which is often all you need day to day, but it should never be treated as security for valuable code or secrets.