How to Protect & Safely Share an Excel Workbook

Last updated: 27 June 2026

Excel has three levels of protection: locking individual cells, protecting a sheet from edits, and password-encrypting the whole workbook. Used together, they prevent accidental overwrites, keep sensitive data (payroll, customer GSTINs) private when sharing, and give you confidence that your business file stays intact. This guide covers every layer, step by step.

Key takeaways

Cell locking + sheet protection is free, built-in and available in every Excel version. Use it on any sheet staff or vendors will see.
Workbook encryption (File → Info → Protect Workbook → Encrypt with Password) sets a password required to open the file.
"Protect Structure" stops anyone from adding, deleting, renaming or moving sheets — useful to prevent accidental deletion of your GST master sheet.
When sharing with a CA or auditor, export a copy as PDF or password-protect a read-only .xlsx — never email your working .xlsm with macros to an unknown recipient.
Excel's password encryption uses AES-256 (Excel 2013+) — strong enough for business use, though not a substitute for enterprise IT security.
If you forget the workbook password, there is no official recovery option. Store passwords in a password manager, not a sticky note.

Fact box. Excel 2013 and later uses AES-256 encryption when you set an "Encrypt with Password" on a workbook. This is the same encryption standard used by banks and government portals. A workbook encrypted with a strong password (12+ characters, mixed case, numbers, symbols) cannot be opened by casual attackers.

What are the three levels of Excel protection?

Understanding the levels prevents over- or under-protecting:

Level	What it stops	Password needed?
Cell locking + Sheet protection	Edits to locked cells; users can still see values	Optional (but recommended)
Protect Workbook Structure	Adding/deleting/renaming sheets	Optional
Encrypt with Password (Open)	Opening the file at all	Yes — required to open

For most SMB use, you need all three on your main accounting file.

How do I lock specific cells and protect a sheet?

By default in Excel, every cell has its "Locked" property set to true — but this only matters when sheet protection is turned on.

Step 1: Unlock the cells users should be able to edit.

Press Ctrl+A to select all cells.
Press Ctrl+1 (Format Cells). Go to the Protection tab.
Uncheck "Locked". Click OK. (Now all cells are unlocked.)
Select only the cells that should be locked — your formula cells, headers, and the rate master. Press Ctrl+1 → Protection → check "Locked". Click OK.

Result: data-entry cells are unlocked, formula and reference cells are locked.

Step 2: Turn on sheet protection.

Go to Review → Protect Sheet.
Set a password (optional but recommended — without one, anyone can unprotect in two clicks).
Choose what users are still allowed to do: tick "Select unlocked cells" (so they can click data-entry fields). Optionally tick "Sort" or "Use AutoFilter" if staff need to filter data.
Click OK.

Now locked cells show a warning dialog if someone tries to edit them. Unlocked cells (your data-entry area) accept input normally.

To unprotect: Review → Unprotect Sheet → enter password.

How do I protect the workbook structure?

This stops anyone from:

Deleting the Rate Master sheet
Renaming sheets
Adding new sheets to change the layout
Moving or copying sheets

Steps:

Go to Review → Protect Workbook.
Check "Structure". (Check "Windows" if you also want to prevent resizing — rarely needed.)
Set a password. Click OK.

The + button for new sheets and right-click options (Insert, Delete, Rename, Move) are now greyed out.

How do I encrypt the workbook with an open password?

This is the "lock the file itself" step. Without the password, the file cannot be opened at all.

Steps:

Go to File → Info → Protect Workbook → Encrypt with Password.
Type a strong password. Click OK.
Re-enter to confirm. Click OK.
Save the file. The password is now required on every open.

Password tips:

Use 12+ characters. Mix uppercase, lowercase, numbers, and symbols.
Example structure: FY27-Sharma@456 — memorable but not guessable.
Store in a password manager (Bitwarden is free). Do not store in the same folder as the file.
Keep a recovery copy of the password with a trusted director of the business.

Fact box. Microsoft has no password recovery mechanism for encrypted Excel files. If you lose the password to an encrypted .xlsx or .xlsm, the file is permanently inaccessible. This is by design — it is what makes the encryption trustworthy. Test a password-protected file on a fresh machine before distributing it.

How do I share an Excel workbook safely?

Different recipients need different levels of access:

Recipient	What to share	Method
CA / auditor	Read-only copy, formulas visible	Password-protected `.xlsx`, "read-only recommended"
Staff data-entry operator	Protected sheet, only data-entry unlocked	Send `.xlsm`, sheet protection on
Customer (for invoice)	Invoice only, no workbook structure	Export sheet as PDF (File → Export → PDF)
Bank / lender	Financial summary	PDF only — never share a live workbook

To set a file as "read-only recommended": File → Save As → click Tools (bottom of the dialog) → General Options → check "Read-only recommended". Click OK, save. When anyone opens the file, Excel suggests they open read-only. They can click Edit anyway, but the prompt discourages casual editing.

To create a shareable PDF from one sheet:

Go to the sheet you want to share (e.g. the Invoice sheet).
Set the print area: Page Layout → Print Area → Set Print Area.
File → Export → Create PDF/XPS.
Choose "Selection: Active sheet". Click Publish.

The PDF is completely separate from the workbook — no formulas, no data from other sheets, no macros.

What should I never put in an unprotected Excel file?

Fields that should always be in locked cells or a protected/encrypted workbook:

Employee salary details, PAN, Aadhaar numbers
Customer GSTINs and contact information
Bank account numbers (yours or customers')
Password lists or access credentials
Pending disputed invoice notes

If you must share a file containing any of these, use encryption (open password) and share the password via a separate channel (phone call or WhatsApp, not the same email thread).

How do I allow one person to edit one section while protecting the rest?

Excel's "Allow Users to Edit Ranges" feature lets you define specific ranges that individual users can edit — each with their own password.

Steps:

Go to Review → Allow Users to Edit Ranges (available in Excel 2010+; may be called "Allow Edit Ranges" in newer versions).
Click New. Name the range (e.g. "Data Entry Area"). Set the range address. Set a password.
Repeat for additional ranges or users.
Then protect the sheet (Review → Protect Sheet). Users who know the range password can edit that range; others cannot.

This is ideal for shared files where one staff member handles purchases and another handles sales — each can only edit their own section.

How Ankeshan helps: Ankeshan stores the master rate and customer tables in a protected layer inside Excel that staff cannot accidentally overwrite — the data-entry cells are clearly separated from the formula and reference cells by design. It is launching soon; join the waitlist.

Frequently asked questions

What is the difference between sheet protection and workbook encryption? Sheet protection prevents editing specific cells — but the file can still be opened by anyone. Workbook encryption (Encrypt with Password) prevents opening the file without the password. Use both: encryption for confidentiality, sheet protection for preventing accidental edits.

Can I protect a sheet without a password? Yes. If you do not enter a password in the Protect Sheet dialog, the sheet is protected but anyone can unprotect it via Review → Unprotect Sheet with no prompt. This prevents accidental edits from staff unfamiliar with Excel, but not from anyone who knows how to look.

Will protection work if someone opens the file in Google Sheets? Sheet protection is respected in Google Sheets when importing a protected Excel file, but it is not identical. Some features may behave differently. For confidential files, use open-password encryption — an encrypted .xlsx cannot be previewed or opened in Google Sheets without first removing the encryption in Excel.

I forgot the sheet protection password — how do I recover it? Sheet protection passwords (as distinct from open-file encryption) can sometimes be removed using third-party tools, because the algorithm is weaker. Open-file encryption (AES-256) cannot be recovered without the password. For your own files, keep all passwords in a password manager.

Should I protect Excel files containing employee Aadhaar or PAN data? Yes — both at the file level (encrypt with password) and at the sharing level (share only with people who have a legitimate need). India's Digital Personal Data Protection Act, 2023 places obligations on any business that handles personal data — including employee Aadhaar and PAN — to keep it secure, use it only for the stated purpose, and protect it against unauthorised access. Encrypted, access-controlled storage is a basic step toward meeting those duties. Confirm the specific obligations that apply to your business with a legal adviser, as the detailed DPDPA rules are being rolled out in phases.

Sources

Microsoft Support — Protect a worksheet, Protect a workbook, Encrypt with password (support.microsoft.com)
Ministry of Electronics & IT — Digital Personal Data Protection Act 2023 (meity.gov.in)

General information only, not professional advice. Verify data protection obligations for your business with a legal adviser. Reviewed by a Chartered Accountant; last updated 27 June 2026.