# How to Password Protect an Excel File (Windows & Mac)

- url: https://www.tryplox.com/blog/protect-an-excel-spreadsheet
- date: 2026-06-24
- tags: Security, How-to, Document sharing
- excerpt: How to password protect an Excel file step by step: encrypt with a password, lock sheets, on Windows and Mac, plus a tracked way to share securely.

To password protect an Excel file, open the workbook and go to File > Info > Protect Workbook > Encrypt with Password, type a strong password, confirm it, and save. That encrypts the whole file so it cannot open without the password. If you only want to restrict edits, use Protect Sheet or Protect Workbook Structure instead.

Excel gives you two protections that people constantly mix up. Encryption locks the file so it cannot be opened. Sheet protection locks the contents from being edited. Below are the exact steps for both, on Windows and Mac, plus the point where the manual approach quietly fails once you send the file to someone else.

## How do I password protect an Excel file?

Use this when you want the file itself to be unreadable without a password. It is real AES encryption, not a soft warning.

1. Open the workbook in Excel.
2. Go to `File` > `Info`.
3. Click `Protect Workbook`, then choose `Encrypt with Password`.
4. Type a strong password and click `OK`.
5. Re-enter the same password to confirm, click `OK`, then save the file.

After that, anyone opening the file is prompted for the password. There is no recovery if you lose it, so keep it in a password manager, not in the email sitting next to the file.

Tip: a "strong" password here means 12+ characters with a mix of cases, numbers and symbols. Short passwords on Excel files are crackable with off-the-shelf tools.

## How do I protect a sheet or the workbook structure?

This does not encrypt the file. It stops people from editing cells, or from adding, deleting and renaming sheets, after the file is already open.

Protect a single sheet (lock the cells):

1. Open the sheet you want to lock.
2. Go to the `Review` tab and click `Protect Sheet`.
3. Optionally set a password and tick what users are still allowed to do (select cells, use filters, etc.).
4. Click `OK` and confirm the password.

Protect the workbook structure (stop sheet changes):

1. Go to the `Review` tab and click `Protect Workbook`.
2. Tick `Structure`, set an optional password, and click `OK`.

Now nobody can rename, move, delete or insert sheets without the password. Data in unlocked cells can still be edited unless you also protect the sheet.

## How do I protect an Excel spreadsheet on a Mac?

Same features, slightly different menus.

1. Open the workbook in Excel for Mac.
2. For encryption, go to `Review` > `Protect Workbook`, tick `Encrypt with Password`, type and confirm a password, then click `OK`.
3. For sheet locking, go to `Review` > `Protect Sheet`, set permissions and an optional password, then click `OK`.
4. Save the file.

On Mac, the full-file password lives under the `Review` tab rather than `File > Info`, but the encryption is the same.

## How do I mark a workbook as final?

Marking as final is a courtesy flag, not security. It tells viewers the file is done and makes it read-only until they choose to edit anyway.

1. Go to `File` > `Info` > `Protect Workbook`.
2. Choose `Mark as Final` and confirm.

Anyone can click "Edit Anyway" to remove it. Use it to signal intent, never to protect sensitive data.

## Encryption vs sheet protection: which one do I need?

This is the distinction that trips most people up.

| | Encryption (Encrypt with Password) | Sheet / workbook protection |
|---|---|---|
| What it locks | Opening the file at all | Editing cells or changing sheets |
| Strength | Strong AES encryption | Weak, easily removed |
| Stops viewing? | Yes, file is unreadable | No, anyone who opens it sees everything |
| Recoverable if lost? | No | Yes, can be stripped with free tools |
| Use it for | Confidential files you send out | Templates, formulas, shared internal files |

If your goal is keeping outsiders from reading a financial model or a cap table, you want encryption. Sheet protection only stops accidental edits, and it can be removed in seconds with a free online unlocker.

## The limits of password-protecting an Excel file

Encryption is useful, but it only protects the file, not the act of sharing it. Once you send a protected `.xlsx` as an attachment, you lose control.

- A shared password can be forwarded. Whoever you send it to can pass the file and the password to anyone, and you will never know.
- There is no tracking. You cannot see who opened it, when, how many times, or whether it was downloaded and re-shared.
- You cannot revoke access. After the file leaves your outbox, there is no "undo." It lives on recipients' drives forever.
- It is all-or-nothing. Anyone with the password sees the full file. You cannot expire access or restrict it per person.

For an internal template, those limits are fine. For a sensitive spreadsheet going to an investor, a buyer or a contractor, "they have the password forever and I have no visibility" is the actual risk.

## The better way: share a sensitive spreadsheet as a tracked passcode link

Instead of emailing an encrypted file and hoping, you can share the spreadsheet as a secure link that you still control after it is sent. Plox is a secure document sharing and virtual data room platform for founders, investors and dealmakers.

Upload the `.xlsx` and share it as a link instead of an attachment. The file stays on Plox, so you keep control:

- Set a passcode (and optional email verification) so only the right person gets in. It is the link equivalent of an Excel password, but tied to a specific viewer.
- See page-by-page analytics: who opened it, time spent, completion, with real-time notifications the moment it is viewed.
- Allow or block download, add per-viewer watermarking, set an expiry date, and revoke access in one click even after sending.
- Update the file anytime. The link never changes, so you are never stuck with a stale version floating around.

A passcode link gives you what an Excel password cannot. You can tell who actually opened it, stop sharing whenever you want, and prevent silent forwarding. Plox has a genuine free plan (secure links, analytics and real-time notifications, no credit card, no time limit); watermarking and advanced controls are on the paid tiers.

For the full set of controls, see [Plox document control](/document-control).

## Related security how-tos

- [How to password protect a folder on Windows, Mac and online](/blog/password-protect-a-folder-on-windows-mac-and-online)
- [How to securely store documents](/blog/how-to-securely-store-documents)

## Frequently asked questions

### Can a password-protected Excel file be hacked?

A file encrypted with "Encrypt with Password" using a strong, long password is well protected, since modern Excel uses AES encryption. The weak point is the password itself. Short or guessable passwords can be cracked with off-the-shelf tools. Sheet protection, by contrast, is trivially removed and should not be relied on for confidentiality.

### What is the difference between protecting a sheet and encrypting the workbook?

Encrypting the workbook locks the whole file so it cannot be opened without a password. Protecting a sheet only stops edits to cells or sheet structure once the file is already open, and anyone who opens it can still read everything. Use encryption to control viewing, sheet protection to prevent accidental edits.

### How do I remove a password from an Excel file?

Open the file with the current password, go to `File` > `Info` > `Protect Workbook` > `Encrypt with Password`, delete the password from the box, click `OK`, and save. For sheet protection, use `Review` > `Unprotect Sheet`. You have to know the password to remove it cleanly.

### Can I track who opened my Excel file after I send it?

Not with Excel's built-in protection. Once you send an encrypted attachment, you have no visibility into who opened it or whether it was forwarded. To track opens, time spent and downloads, share the spreadsheet as a tracked link through a tool like Plox instead of as an attachment.

### Is "Mark as Final" a real security feature?

No. Mark as Final only flags the file as read-only and shows a notice. Any viewer can click "Edit Anyway" to bypass it. It signals that a file is finished, but it does nothing to stop reading, editing or sharing. For real protection, use encryption or a controlled link.

### What is the safest way to share a confidential spreadsheet externally?

Share it as a controlled link rather than an attachment. A passcode-protected, trackable link lets you verify who opens it, watermark each view, block downloads, set an expiry and revoke access after sending, none of which an emailed Excel password can do. That is what [Plox document control](/document-control) is built for.

Ready to stop emailing files and hoping? [Share your spreadsheet securely with Plox](/) as a tracked, passcode-protected link, free to start, no credit card.