5 Free DIY Methods

Unprotect an Excel Sheet Without the Password

You clicked a cell, Excel refused to let you type, and the original password is long forgotten. Good news — sheet protection is not file encryption, so you do not need the password to remove it. Below are five free methods that actually work in 2026, ranked from easiest to most technical.

Sheet protection is not file encryption — read this first

Excel has two completely different password types. Sheet protection (what this article covers) is a soft lock stored as plain XML; the workbook data is fully readable. A file password to open encrypts the entire workbook with AES and cannot be bypassed — it can only be recovered. If Excel refuses to open the file at all and asks for a password before showing anything, you have a file password, not sheet protection. In that case see our Excel password recovery guide instead.

Method 1 — Edit the XML inside the .xlsx (most reliable)

An .xlsx file is really a ZIP container of XML files. Sheet protection is stored as a single XML element inside each sheet. Removing that element removes the lock. This method works in every Excel version including 365.

  1. Make a copy of your workbook. Never edit the original.
  2. Rename the copy from workbook.xlsx to workbook.zip. If extensions are hidden, enable "File name extensions" in Explorer's View tab.
  3. Open the ZIP with 7-Zip or WinRAR (do not fully extract it — edit inside the archive).
  4. Navigate to xl/worksheets/. You will see one file per sheet: sheet1.xml, sheet2.xml, etc.
  5. Open each sheetN.xml in a plain text editor (Notepad++, VS Code) and find a line similar to:
<sheetProtection algorithmName="SHA-512"
    hashValue="..." saltValue="..." spinCount="100000"
    sheet="1" objects="1" scenarios="1"/>
  1. Delete the entire <sheetProtection ... /> line (including the closing slash).
  2. Save and let the archiver update the ZIP.
  3. Rename the file back from .zip to .xlsx.
  4. Open in Excel. Protection is gone. If Excel warns about file content, choose "Yes" to repair — it will keep all data.

For workbook structure protection (hidden sheets, locked structure), the element is <workbookProtection /> inside xl/workbook.xml. Delete it the same way.

Method 2 — Google Sheets round-trip

Google Sheets imports Excel data but ignores Excel-specific sheet protection. Uploading and re-downloading strips the lock.

  1. Go to sheets.google.com and create a blank sheet.
  2. File → Import → Upload your .xlsx.
  3. Choose "Replace spreadsheet" to import the whole workbook.
  4. Once open, go to File → Download → Microsoft Excel (.xlsx).
  5. The downloaded file has no sheet protection.

Caveats: some conditional formatting, data validation, complex formulas with Excel-only functions, and macros may be translated imperfectly. For heavy workbooks prefer Method 1.

Method 3 — VBA macro (legacy .xls files)

Old Excel sheet protection uses a weak 16-bit hash, so many different passwords produce the same hash. A short VBA loop finds a "dummy" password that unlocks the sheet. This works best on .xls files and older .xlsm files. It will not work on sheets protected in recent Excel versions with SHA-512.

  1. Open the protected workbook in Excel.
  2. Press Alt + F11 to open the Visual Basic editor.
  3. Insert → Module, paste the macro below.
  4. Click the sheet you want to unlock in Excel (so it becomes ActiveSheet), then in the VBA editor press F5.
  5. Wait up to a minute. A message box appears with a dummy password and the sheet is unlocked.
Sub UnprotectSheet()
    Dim i As Integer, j As Integer, k As Integer
    Dim l As Integer, m As Integer, n As Integer
    Dim i1 As Integer, i2 As Integer, i3 As Integer
    Dim i4 As Integer, i5 As Integer, i6 As Integer
    On Error Resume Next
    For i = 65 To 66: For j = 65 To 66: For k = 65 To 66
    For l = 65 To 66: For m = 65 To 66: For i1 = 65 To 66
    For i2 = 65 To 66: For i3 = 65 To 66: For i4 = 65 To 66
    For i5 = 65 To 66: For i6 = 65 To 66: For n = 32 To 126
        ActiveSheet.Unprotect Chr(i) & Chr(j) & Chr(k) & _
            Chr(l) & Chr(m) & Chr(i1) & Chr(i2) & Chr(i3) & _
            Chr(i4) & Chr(i5) & Chr(i6) & Chr(n)
        If ActiveSheet.ProtectContents = False Then
            MsgBox "Unprotected. Dummy: " & Chr(i) & Chr(j) & _
                Chr(k) & Chr(l) & Chr(m) & Chr(i1) & Chr(i2) & _
                Chr(i3) & Chr(i4) & Chr(i5) & Chr(i6) & Chr(n)
            Exit Sub
        End If
    Next: Next: Next: Next: Next: Next
    Next: Next: Next: Next: Next: Next
End Sub

If you get "Compile error" in Excel 64-bit, simply keep the code as is — the routine uses no Win32 APIs. If nothing happens after a minute, the sheet is using SHA-512 and you need Method 1 instead.

Method 4 — Copy to a new workbook

A quick-and-dirty workaround when you only care about the data:

  1. Open the protected workbook.
  2. Click the top-left corner of the sheet (the triangle between column A and row 1) to select all cells.
  3. Press Ctrl + C.
  4. Open a new blank workbook, click A1 and press Ctrl + V.

Caveats: formulas referencing other sheets break, merged cell formatting may shift, and macros do not come along. If copy is silently blocked, the original owner set "Select locked cells" off — in that case paste will only transfer visible data. Prefer Method 1 or 2 for anything non-trivial.

Method 5 — Online sheet-unlock tools

Several websites offer a one-click sheet unprotect. Internally they run Method 1 (XML strip) on a server. They are fine for non-sensitive files, but never upload financial, HR, or legal documents to random services — doing the XML edit yourself takes two minutes and keeps the data on your machine.

What About File-Open Passwords?

None of the above will help if the file asks for a password before Excel can open it at all. That is a file password (also called Password to Open) and it uses real cryptography — AES with tens of thousands of iterations of a key-derivation function. There is no XML to edit because the XML itself is encrypted.

For file-open passwords your options are: remember the password, try password variations you commonly use, or run a GPU-based recovery attack. If the file is from Excel 97-2003 (.xls), recovery is mathematically guaranteed. For 2007+ .xlsx, see realistic odds by version in our Excel by version guide.

Be honest about ownership

Sheet protection is often applied by colleagues to prevent accidental edits, not to withhold data. If the file is shared in your company, check with the author before stripping protection — they may have a reason for the lock. Unprotecting a file you have no right to edit may violate workplace policy.

Frequently Asked Questions

Does the XML method work on .xlsm (macro-enabled) files?

Yes. .xlsm files are structured identically to .xlsx but with additional macro parts. Rename to .zip, edit the sheet XML, rename back to .xlsm. Macros remain intact.

I removed sheetProtection but Excel still shows the sheet as protected. Why?

There is often a second element inside workbook.xml called workbookProtection (structure/windows lock). Delete that too. Also clear any data-validation-based pseudo-locks the author may have added.

Will this break digital signatures on the workbook?

Yes. Editing XML invalidates a digital signature. If the file is signed for compliance reasons you must re-sign it after modification. For normal office work this is not an issue.

What if my sheet has 'Allow Users to Edit Ranges' with per-user passwords?

Those are stored inside the same sheetProtection element, so the XML method removes them all at once.

Can I write a password-reset macro that works on 365 SHA-512 sheets?

Not in reasonable time. SHA-512 with 100,000 rounds makes brute-force infeasible in VBA. Use Method 1 (XML edit) for modern files — it takes two minutes and always works.

Need a file-open password instead?

Everything above is for sheet protection. If Excel refuses to open your workbook entirely and asks for a password upfront, that is real AES encryption and the XML methods do not apply. Run a free check via our Excel password recovery service — you pay only if the password is recovered.