Remove Excel Sheet/Workbook Protection Without Password
Yes, you can remove sheet or workbook protection from an Excel file without the password, but the method depends on the file type. For legacy .xls files, protection is weak and can be stripped by editing the underlying XML; for modern .xlsx files, sheet protection is also removable without the password, but workbook structure protection (which prevents adding/deleting sheets) is stronger and may require third-party tools or a password recovery approach. This article explains the technical details, step-by-step methods, and important caveats for each scenario.
Background: Why Excel Protection Exists
Excel offers two distinct layers of protection:
- Sheet protection – restricts what users can do within a single worksheet, such as editing locked cells, sorting, or using filters. It is set via Review > Protect Sheet and can include a password.
- Workbook protection – has two sub-types: structure (prevents adding, moving, or deleting sheets) and windows (keeps window size/position fixed). Set via Review > Protect Workbook.
These protections are not encryption. They are essentially UI locks that prevent accidental or unauthorized changes through the normal interface. The underlying data is stored in plain text (or XML) within the file, which is why the password can often be bypassed.
How Sheet Protection Works (and Why It’s Weak)
In the Open XML format (.xlsx), a protected sheet stores a hash of the password and a list of locked elements in the sheetProtection element of the sheet’s XML. The hash is a simple SHA-1 or SHA-512 with a salt, but the actual lock is just a flag – the file itself is not encrypted. This means you can remove the sheetProtection element entirely, and Excel will open the sheet as unprotected.
For legacy .xls files, the protection is even simpler: the password is stored as a 16-bit hash, and the protection flag is a single byte in the file’s binary structure. Tools like libreoffice or hex editors can flip that byte.
Method 1: Remove Sheet Protection from .xlsx (No Password)
This method works for any .xlsx file (Excel 2007 and later). You do not need the password, just access to the file.
- Make a copy of the Excel file (e.g.,
protected.xlsx→copy.xlsx). - Rename the copy to a .zip file (e.g.,
copy.zip). - Extract the zip contents to a folder.
- Navigate to the
xl/worksheets/folder. Each sheet is a file likesheet1.xml. - Open the sheet XML in a plain text editor (Notepad, VS Code).
- Find the
<sheetProtection ... />tag. It may look like:<sheetProtection algorithmName="SHA-512" hashValue="..." saltValue="..." spinCount="100000" sheet="1" objects="1" scenarios="1"/> - Delete that entire tag and save the file.
- Re-zip the folder contents back into a .zip file. Ensure the
[Content_Types].xmlis at the root. - Rename the .zip back to .xlsx and open it in Excel. The sheet protection is gone.
If you have multiple sheets, repeat the removal for each sheet’s XML file.
Method 2: Remove Workbook Structure Protection
Workbook protection (structure) is stored in the xl/workbook.xml file. The tag is <workbookProtection ... />. Removing it via the same zip method will disable the structure lock, allowing you to add or delete sheets. However, be aware that some workbook protection features (like “always show hidden sheets�) may be controlled by other settings.
For .xls files, the binary structure is more complex, but tools like LibreOffice can open the file, and you can simply go to Review > Protect Sheet and unprotect without a password (if you have write access). LibreOffice often ignores the password for legacy files.
Method 3: Using Third-Party Tools
If you prefer a GUI or need to handle many files, several free and paid tools exist. Some popular ones:
- Passware Kit Excel Key – commercial, recovers passwords via brute-force/dictionary.
- LostMyPass – online service, but you must upload your file (privacy risk).
- Excel Password Remover – many small utilities, but be cautious of malware.
These tools typically work by either removing the protection flag (like the XML method) or by recovering the password. For sheet protection, removal is instant; for workbook protection, they may need to brute-force the password, which can take time.
Safety and Legal Considerations
Before you bypass protection, ask yourself: do you have the right to modify this file? If it’s a file from your employer or a client, removing protection without permission may violate policies or contracts. For personal files where you forgot the password, it’s perfectly fine. Never use these methods to circumvent copy protection on commercial software or to access data you are not authorized to see.
Also note: this does not work for files that are encrypted with a password to open (File > Info > Protect Workbook > Encrypt with Password). That uses real encryption (AES) and cannot be bypassed by editing XML – you would need a password recovery tool, which may be computationally infeasible.
Common Problems and Pitfalls
- Zip extraction errors – If you get “file is corrupt� after re-zipping, you likely used Windows’ built-in zip which adds extra metadata. Use a tool like 7-Zip and select “Store� compression, or simply re-zip the extracted folder (not the parent).
- Multiple sheets – Forgetting to remove protection from all sheets. Check each
sheetN.xml. - Hidden sheets – If a sheet is very hidden, you may not see it in Excel, but it still exists in the XML. You can remove protection and then unhide it via right-click on a sheet tab.
- Workbook protection still active – If you removed
workbookProtectionbut still can’t add sheets, check if the workbook is shared (Review > Share Workbook). Shared workbooks have different restrictions.
Frequently Asked Questions
Can I remove protection without changing the file extension?
No, the zip method requires renaming to .zip to access the XML. You can use a tool like 7-Zip to open the file directly without renaming, but you still need to extract and re-pack.
Does this work for Excel 2019 or Excel 365?
Yes, the XML structure is the same for all .xlsx files, regardless of the Excel version. The method works for files created in Excel 2007 through 365.
What if the file is .xls (Excel 97-2003)?
For .xls, the XML method does not apply. You can try opening it in LibreOffice and unprotecting the sheet (often no password is required), or use a hex editor to change the protection flag byte. Alternatively, save it as .xlsx first (if you can open it) and then apply the XML method.
Is it illegal to remove protection from an Excel file?
It is not inherently illegal, but it may violate the file owner’s terms of use or your employment agreement. Always get permission if the file is not yours.
Will this work if the file has a password to open?
No. If the file requires a password to open (encryption), the contents are encrypted and you cannot access the XML without the password. You would need to recover the password, which is a different process.
Can I prevent others from removing protection this way?
No, not with standard Excel. The protection is not meant to be a strong security measure; it’s for preventing accidental edits. For true security, use encryption (password to open) or share via a controlled platform like SharePoint.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.