The fastest way to password-protect a Word document
Open the document you want to protect in Microsoft Word. Go to File > Info > Protect Document (or Protect Workbook if you're in Excel). Select Encrypt with Password. Type a password you'll remember, then type it again to confirm. Save the file. From now on, anyone who opens that document will need to enter your password first.
This method works in Word 2016 and later on Windows, and Word 2016 and later on Mac. The password you set becomes the only way to open the file — not just to edit it. If you forget the password, Microsoft cannot recover it for you, so write it down somewhere safe or use a password manager.
If you're using an older version of Word or need a different kind of protection, the steps below cover other options. But password encryption is the simplest choice for most people who want to keep a document private.
Key Takeaways
- Password encryption in Word prevents anyone from opening the file without the correct password, and is the fastest protection method for most documents.
- You can also restrict editing so people can open the document but can only make tracked changes, leaving the original intact.
- Word's built-in encryption uses the same technology banks use, so a strong password makes it extremely difficult to break into the file.
- If you forget your password, there is no recovery option — Microsoft cannot unlock the file for you, so store your password securely.
- For documents shared with others, consider whether you want to prevent opening entirely or just prevent editing without your permission.
The difference between password protection and restricted editing
Word offers two separate protections, and they do different things. Password encryption (what we covered above) locks the entire file. Nobody can even open it without the password. Restricted editing lets people open the document but limits what they can do — they can read it, add comments, or make tracked changes, but they cannot modify the original text without your approval.
Use password encryption if the document contains sensitive information and you want to keep it completely private. Use restricted editing if you're sharing a draft with colleagues or clients and want them to see it but not accidentally (or intentionally) change the final version. You can also use both at once: password-encrypt the file so only certain people can open it, then restrict editing so those people cannot make permanent changes.
How to restrict editing without a password
Open your document in Word. Go to File > Info > Protect Document > Restrict Editing. On the right side, under "Editing restrictions," check the box next to Limit formatting to a selection of styles or Allow only this type of editing. If you choose the second option, a dropdown menu appears — select Tracked changes, Comments, or Filling in forms depending on what you want people to do.
Once you've chosen your restriction, click Yes, Start Enforcing Protection. Word will ask if you want to set a password. You can leave this blank if you just want to discourage casual editing, or add a password if you want to prevent people from turning off the restriction. Click OK and save the file.
When someone opens this document, they'll see a notification that editing is restricted. If you set a password, they cannot remove the restriction without entering it. If you didn't set a password, they can click Stop Protection at any time and edit freely — so this method is more about signaling intent than enforcing it.
Creating a password you can actually remember
A password that's easy to guess is almost useless. A password that's impossible to remember defeats the purpose. The middle ground is a passphrase — a string of random words or a sentence only you would know. "BlueSock47Lamppost" is stronger than "password123" and easier to remember than "7$mK9@xL2pQ". Avoid birthdays, names, or anything someone could find on your social media.
If you use the same password for multiple documents, write it down in a password manager like Bitwarden, 1Password, or the password manager built into Windows or Mac. These tools store passwords encrypted on your device, so you only have to remember one master password. If you write passwords on paper, keep that paper in a locked drawer or safe, not on a sticky note on your monitor.
What happens when you password-protect a Word document
When you encrypt a Word file with a password, the entire document is scrambled using AES-256 encryption — the same standard the U.S. military uses for classified documents. Without the correct password, the file is unreadable. Someone cannot open it, search it, or extract text from it. They cannot even tell how long the document is or what it contains.
This protection stays in place even if the file is emailed, uploaded to cloud storage, or stolen. The only way in is the password. This also means that if you lose the password, the document is locked forever — there is no "forgot password" recovery like you'd have with an email account or website. Microsoft does not store your password and cannot unlock the file.
Protecting documents in older versions of Word
If you're using Word 2013 or earlier, the steps are slightly different. Open the document, go to File > Save As. In the dialog box, click Tools (or the gear icon), then General Options. You'll see two password fields: one to open the document and one to modify it. You can set one, both, or neither. The "open" password works like encryption — the file cannot be opened without it. The "modify" password lets people open the file but requires a password to save changes.
After you set your passwords, click OK, then save the file. The next time someone opens it, they'll be prompted for the password. This method is less secure than modern Word encryption, but it still works if you're stuck with older software.
Protecting documents stored in OneDrive or SharePoint
If your document lives in Microsoft OneDrive or SharePoint, you have an additional layer of protection: file-level sharing permissions. You can password-encrypt the document itself (using the steps above), and you can also control who can access the file through OneDrive or SharePoint settings. Go to the file, click Share, and choose whether people can view, edit, or have no access at all.
This is useful because it prevents people from even seeing the file unless you give them permission, separate from the password protection of the document itself. Someone cannot download the file without access, and if they somehow do get it, they still need the password to open it. For shared documents, this two-layer approach is stronger than password protection alone.
Frequently Asked Questions
Can I password-protect just part of a Word document?
No, Word encrypts the entire file or not at all. If you need to protect only certain sections, you can use restricted editing to lock specific parts while leaving others editable. Select the section you want to protect, go to File > Info > Protect Document > Restrict Editing, and configure permissions for that selection.
What if I forgot my password?
There is no recovery. Microsoft cannot unlock the file, and no tool can reliably break AES-256 encryption. If the document is critical, your only option is to recreate it from a backup or an unencrypted copy. This is why storing passwords in a password manager is important.
Does password-protecting a Word document slow it down?
No. The encryption happens when you save and when someone opens the file, but once it's open, the document behaves normally. You won't notice any performance difference while editing.
Can I password-protect a document and still share it with others?
Yes. Share the password separately from the file — never in the same email or message. You could text the password, call them, or use a password manager that lets you share credentials securely. This way, the file is protected in transit and at rest.
Is password protection enough, or do I need encryption software?
Word's built-in encryption is strong enough for most personal and business documents. You only need additional encryption software if you're handling extremely sensitive data like medical records, financial statements, or trade secrets — in which case you should also consult your organization's security team.