Remove Password for Excel File — Complete Guide (2026 June)

Remove Password for Excel File — Complete Guide (2026)

Locked out of your own Excel file? It happens more than you'd think. Maybe you set a strong password six months ago and your password manager glitched. Maybe a colleague who left the company protected a shared budget. Maybe you inherited a workbook from a predecessor who never documented anything.

The fix depends on three things: which kind of password you're dealing with, whether you still know it, and what Excel version created the file. There are three different password types in modern Excel — workbook open, workbook structure, and sheet protection — and each one needs a different removal approach.

This guide walks through every legitimate method. Start with the simplest. If you know the password, you're 30 seconds away from done. If you don't, the modern .xlsx ZIP trick handles sheet-level protection for free. Only the file-open password requires paid tools — and even then, success isn't guaranteed.

Fair warning: there's no magic registry tweak or hidden command that bypasses Microsoft's encryption. Anyone selling you a $5 "instant unlock" tool is either lying or running malware. Real recovery means real cryptography. Sometimes it works in minutes. Sometimes it takes weeks. Sometimes the file stays locked forever.

The good news? Roughly 70% of how to password protect an excel file situations end up being sheet or structure protection — both of which are removable for free with the methods below. The other 30% are file-open passwords, where your odds depend entirely on password complexity.

Let's start with the easiest scenario: you know the password and just want it gone.

Method 1: Remove a Known Workbook Password (10 Seconds)

If you remember the password, this is trivial. Open the file, enter the password when prompted, then strip it out.

Steps for the File-Open Password

Open Excel, then enter your password when the prompt appears. Once the workbook is open, click File → Info → Protect Workbook → Encrypt with Password. A dialog appears showing dots representing your current password. Clear that field completely. Click OK. Save the file with Ctrl+S.

That's it. Reopen the file to confirm — no password prompt should appear. If one does, you forgot to save, or you saved to a different location. Check the file path in the recent files list.

Alternative: Save As Method

If the File → Info route doesn't work (sometimes the Encrypt option is greyed out in older versions), use Save As instead. Press F12 to open the Save As dialog. Look for the Tools dropdown next to the Save button — it's easy to miss. Click it. Choose General Options. You'll see two password fields: one for opening, one for modifying. Clear both. Click OK, then Save.

This Tools menu has been hiding in Save As since Excel 2003 and almost nobody uses it. It works in every version including Excel for Mac. Worth bookmarking mentally — it's also where you set passwords in the first place if you prefer the dialog approach over the ribbon.

Once the password is removed, you can safely close and email the file. Compare your approach with how to password protect excel file if you want to re-protect with a fresh password later.

Method 2: Remove a Known Sheet Password (Single Click)

Sheet protection is the most common kind. Someone locked the worksheet so you can't edit formulas or change formatting. If you know the password, removing it takes one click.

Sheet-Level Steps

Open the workbook. Click the Review tab on the ribbon. You'll see Unprotect Sheet (it'll be greyed out if no protection exists). Click it. Enter the password. Done.

If multiple sheets are protected, repeat for each one — Excel doesn't have a built-in "unprotect all sheets" command in the standard ribbon. You can write a quick VBA macro to do it (Alt+F11, paste a loop through Worksheets, run it) but for most files it's faster to click through each tab.

Workbook Structure Steps

Same idea, different button. Click Review tab, then Protect Workbook (the button toggles on/off — if it's currently highlighted, the workbook is protected). Click it. Enter the password. The button un-highlights. Save.

Workbook structure protection blocks you from adding, deleting, hiding, or renaming sheets — but it doesn't prevent editing data inside existing sheets. That's a common misunderstanding. If you can't edit cells, you're dealing with sheet protection, not workbook structure protection. Different beast, different fix.

The how to unprotect an excel file walkthrough covers the full UI for both. For deeper cell-by-cell control, the how to unprotect cells in excel guide explains how Locked-cell formatting interacts with sheet protection.

What If Unprotect Sheet Is Greyed Out?

Two possibilities. Either the sheet isn't actually protected (the button only activates when there's something to unprotect), or you're viewing the file in Protected View — Excel's read-only sandbox for files from the internet. Look for the yellow Enable Editing bar at the top of the window and click it. The Review tab buttons should activate once Excel exits Protected View.

Another edge case: shared workbooks. If the file is in legacy shared mode (Tools → Share Workbook in older versions), some protection commands are disabled. Stop sharing first via the same menu, then unprotect, then re-share if needed. Modern co-authoring through OneDrive or SharePoint doesn't have this limitation.

Method 3: ZIP/XML Method for Forgotten Passwords (Free)

This is the one everyone wants to know. You forgot the password. The file is locked. You don't want to pay for a tool. There's a free method that works — but only for certain types of protection.

The trick exploits a fact most people don't know: modern Excel files (.xlsx, .xlsm, .xltx — anything from Excel 2007 onward) are actually ZIP archives containing XML files. Rename the extension to .zip and you can open them with any unzipper. Inside, the protection passwords for sheets and workbook structure are stored as plain references in XML. Delete the reference, re-zip the file, and the protection is gone.

What This Method Can Remove

This works for sheet protection passwords and workbook structure passwords — the kinds set via the Review tab. Both store their protection state as XML elements that can be edited or deleted.

What This Method Cannot Remove

The ZIP method does not work on the file-open password (the AES-256 encryption set via File → Info). When that password is set, the entire ZIP contents are encrypted as a single blob — you can't even open the file as a ZIP without the password. If your file shows a password prompt before any content appears, the ZIP trick won't help. Skip to Method 4.

Step-by-Step ZIP Method

Make a backup copy first. Always. If you mangle the XML, the original is your safety net. Then rename the file extension from .xlsx to .zip. Windows might warn you about changing extensions — click Yes. (If you don't see extensions, enable them: View tab in File Explorer → check "File name extensions.")

Right-click the .zip and choose Extract All, or open it with 7-Zip and copy out the contents. Inside the extracted folder, navigate to xl/worksheets/. You'll see sheet1.xml, sheet2.xml, etc. — one file per worksheet. Open the sheet you want to unprotect in Notepad or VS Code.

Search for the string sheetProtection. You'll find a tag like <sheetProtection password="CAB1" sheet="true" objects="true"... /> with various attributes. Delete the entire tag from the opening < to the closing />. Save the file. Repeat for any other protected sheets.

For workbook structure protection, the same trick applies to xl/workbook.xml. Find and delete the <workbookProtection ... /> tag. Save. Now zip everything back up — important: zip the contents of the folder, not the folder itself. The top level of the ZIP should be [Content_Types].xml, _rels, docProps, and xl. Rename the .zip back to .xlsx. Open in Excel — protection gone.

Method 4: Paid Recovery Tools for Forgotten File-Open Passwords

If your file has the AES-256 file-open password and you've forgotten it, your only real option is professional password recovery software. These tools attempt to crack the encryption by trying millions of passwords per second using your GPU. Success depends entirely on how complex the original password was.

Reputable Tools (2026)

The established players: Passper for Excel (around $30 for a single-file license), iSeePassword Excel Password Recovery (around $50), PassFab for Excel (around $40), and Stellar Phoenix Excel Password Recovery (around $90 for full features). All four support dictionary attacks, mask attacks (if you remember partial info — like "started with capital S, had 8 digits"), and brute force as a last resort.

Realistic Time Estimates

A 6-character password with mixed case and digits has roughly 56 billion combinations. A consumer GPU runs through these in 2–10 hours depending on the card. An 8-character password balloons to 218 trillion combinations — that's 3–4 weeks on the same GPU, sometimes longer. A 12-character random password with symbols is effectively uncrackable on consumer hardware. You're looking at years, possibly centuries.

Hint attacks help. If you remember the password started with "Budget" and had the year somewhere, set up a mask attack — that drops the search space from quintillions to maybe a million combinations. Solvable in minutes.

What to Watch For

Free "Excel password remover" tools advertised on shady sites are almost universally either ineffective demos that hide a $50 paywall after "finding" the password, or actual malware. Stick to the four names above or established names like Elcomsoft (enterprise-grade, more expensive). For deeper protection workflows, the how to remove password protection in excel reference covers each scenario.

Why Microsoft Office 2013+ AES-256 Is Almost Uncrackable

Quick history. Excel 97-2003 used a weak 40-bit RC4 cipher. Old tools could crack those files in seconds because the keyspace was tiny — only a trillion keys, trivial for a modern GPU. That era of "instant Excel password recovery" tools survived in marketing for decades after they stopped being useful.

Office 2007 added AES-128. Better, but still crackable for short passwords. Office 2013 jumped to AES-256 with 100,000 SHA-512 hash iterations per password attempt. That iteration count is the real defense — it forces every password guess through 100,000 rounds of hashing before comparison. On a top-tier GPU, you can try maybe 200,000 passwords per second instead of the billions per second possible against older formats.

The math gets brutal fast. A 10-character random password (mixed case, digits, symbols) has roughly 7×10^19 combinations. At 200,000 attempts per second, that's 11 million years. Even with a server farm of 1,000 GPUs, you're at 11,000 years. Not happening.

This is why some passwords are genuinely unrecoverable. There's no magic. If you set a strong password on a 2013+ Excel file and forgot it, that data may be gone forever. Backups become extremely important for any sensitive Excel work — see the repair excel file guide for related recovery scenarios.

What Government and Forensics Use

Even law enforcement and forensic firms rely on the same brute-force tools. They have access to GPU clusters and side-channel attacks, but the cryptographic math is identical. They succeed when passwords are weak, when there's a keylogger record, when the password is in a leaked database, or when the user wrote it on a sticky note. The encryption itself isn't broken — the humans around it are.

What this means practically: if your password was random and 10+ characters, accept that the file may stay locked. Move on. If your password was a dictionary word, a phrase, or based on personal info, recovery tools have a real chance. Try Method 4 with mask attacks reflecting whatever fragments you remember.

Prevention — Don't Get Locked Out Again

The best fix for forgotten passwords is never forgetting them. Three habits that prevent 95% of future lockouts:

Use a Password Manager

Bitwarden, 1Password, Dashlane, LastPass — pick one and use it. When you set an Excel password, save it to your vault with the file path or a descriptive name. Cost: $0–$5/month. Time saved over a career: easily dozens of hours of frantic searching and paid recovery attempts.

The vault entry should include: file location, password, date set, who else needs access, and ideally a hint about what the file contains. Future-you will thank past-you when you're staring at a locked workbook from 2027.

Document Passwords in a Shared Vault for Work Files

If you set a password on a shared business file, that password needs to live somewhere your team can find it. Personal password manager won't help if you leave the company. Use a team vault (Bitwarden Teams, 1Password Business) or document it in a corporate password management system. Never just "keep it in your head" for shared work — that creates the exact predecessor-left-locked-files problem this guide solves.

Version Control and Backup Copies

Excel auto-recovery is great but inconsistent. For any important workbook, save copies to OneDrive, Google Drive, or Dropbox with version history. If you accidentally lock yourself out of v3, you can roll back to v2 (which had no password) and re-do the changes. The how to recover unsaved excel files guide explains the AutoRecover flow, and the excel file recovery reference covers broader recovery scenarios.

One more thing: don't password-protect files that don't need it. Sensitive financial data, HR records, contracts — yes, protect those. Random meeting notes, public datasets, draft templates? Skip the password. Every protected file is a future lockout risk. Match protection level to actual sensitivity.

Consider Alternatives to File Passwords

Excel passwords aren't always the right tool. For team files, file-system permissions (Windows ACLs, SharePoint permissions, Google Drive sharing) handle access control better. Only authorized users can see the file at all — no password to forget. For truly sensitive data, an encrypted folder via BitLocker or VeraCrypt protects everything inside without per-file passwords. Excel's built-in protection is fine for casual confidentiality but rarely the strongest option in a corporate environment.