Password protection in Word works differently depending on which version you use

Microsoft Word lets you lock a document with a password, but the steps and the strength of that lock depend on whether you use Word on Windows, Mac, or the web. Desktop versions (Word 2019 and later, or Microsoft 365) offer the strongest protection. The web version of Word offers basic password protection but fewer options. If you use an older version of Word, some of these steps may not exist or may look different.

Password protection in Word does one of two things: it can require a password to open the document at all, or it can require a password to edit it while allowing others to read it without one. Understanding which you need matters, because they protect different things.

Key Takeaways

  • Word on Windows and Mac lets you set a password to open the document or a separate password to edit it, accessed through File > Info > Protect Document.
  • A password to open the document encrypts the entire file; a password to edit it only prevents changes unless someone knows the password.
  • Word's built-in encryption is reasonably strong for personal documents, but it is not the same as the encryption that protects data in transit across the internet.
  • If you lose the password, Microsoft cannot recover it, and the document may become permanently inaccessible.
  • Password-protecting a Word document does not protect it if someone gains access to your computer or your cloud storage account.

How to set a password to open the document on Windows or Mac

Open the document you want to protect. Go to File, then select Info from the left sidebar. Look for a button labeled Protect Document (on Mac it may say Protect). Click it and choose Encrypt with Password.

Word will ask you to enter a password. Type it in, then click OK. Word will ask you to type it again to confirm. Once you do, save the document. The next time anyone opens it, Word will prompt for the password before the document appears.

This password encrypts the entire file. Someone without the password cannot open it at all, cannot see its contents, and cannot extract text or images from it. This is the stronger of the two password options Word offers.

How to set a password to edit (but not open) the document

This option lets people open and read the document without a password, but they cannot make changes unless they know the password. Go to File > Info > Protect Document, then choose Restrict Editing.

A panel will open on the right side. Under "Editing restrictions," check the box that says Allow only this type of editing in the document. A dropdown menu will appear; select Tracked changes or Comments only, depending on whether you want people to suggest edits or only add notes. Then click Yes, Start Enforcing Protection.

Word will ask for a password. Enter one and confirm it. Now anyone who opens the document can read it, but to make changes they must either enter the password or save a copy with a different name. This is useful if you want feedback without risking accidental or intentional changes to the original.

Password protection on Word for the web

Word Online (the free version you access through Office.com) does not have a built-in password protection feature. If you need to password-protect a document stored in OneDrive or SharePoint, you must read it to your computer, password-protect it in the desktop version of Word, and then upload it again.

Alternatively, you can control who can access the document through OneDrive or SharePoint sharing settings. You can set a document to be viewable or editable only by specific people, or you can generate a link that expires after a certain date. This is not the same as password protection — it relies on your cloud storage account security — but it does prevent random people from accessing the file.

What password protection does and does not do

A password-protected Word document is encrypted at rest, meaning the file itself is scrambled on your hard drive or in cloud storage. Someone who steals the file cannot read it without the password. This protects against casual snooping or a stolen laptop that someone tries to access without your login.

Password protection does not protect the document if someone has access to your computer while you are logged in, or if they know your Windows or Mac password. It also does not protect it if someone gains access to your OneDrive or Google Drive account. If your email account is compromised, an attacker can reset your Microsoft password and access any documents stored in your OneDrive. Password-protecting individual documents is a second layer, not a substitute for securing your accounts and devices.

How strong is Word's password encryption

Word uses AES (Advanced Encryption Standard) 128-bit encryption by default, or AES 256-bit if you are using Microsoft 365. Both are considered strong enough for personal documents and most business use. An attacker cannot realistically crack these passwords through brute force — trying every possible combination — in any useful timeframe.

The weakness is not in the encryption itself but in the password you choose. A password like "password123" or "Document2024" can be guessed quickly. A strong password for a Word document should be at least 12 characters long, mix uppercase and lowercase letters, include numbers and symbols, and avoid words that appear in a dictionary or that relate to you personally.

What happens if you forget the password

Microsoft cannot recover a password-protected Word document if you forget the password. There is no "forgot password" option for encrypted files. If the password is lost, the document is effectively inaccessible unless you have an unencrypted copy somewhere else.

If you regularly password-protect documents, consider storing passwords in a password manager like Bitwarden, 1Password, or KeePass. A password manager encrypts your passwords and lets you retrieve them when you need them, which is safer than writing them down or reusing the same password across multiple documents.

Frequently Asked Questions

Can someone remove the password from a Word document?

Not without knowing the password. Word's encryption cannot be bypassed by opening the file in a different program or using an online converter. If someone has the password, they can remove it by opening the document, going to File > Info > Protect Document, and selecting "Encrypt with Password" again, then leaving the password field blank.

Does password-protecting a Word document slow it down?

No. The encryption happens when you save and when someone opens it, but once the document is open and decrypted, it behaves normally. You will not notice any performance difference.

Can I password-protect a document that is already shared with others?

Yes, but they will need the password to open it after you add protection. If the document is shared through OneDrive or SharePoint, password-protecting it does not change the sharing settings — it adds an additional layer. Anyone with the link can still access the file, but they will need the password to read it.

Is password protection enough to keep my document private?

It is one layer of protection, but not enough on its own. It protects the file itself, but not your account, your device, or your internet connection. If someone compromises your email or gains physical access to your computer, a password-protected document is still at risk. Use it alongside account security (a strong email password, two-factor authentication) and device security (keeping your operating system updated, using antivirus software).

Can I password-protect a document in Google Docs or other editors?

Google Docs does not have built-in password protection. You control access through sharing settings instead — you can make a document viewable or editable only by specific people. If you need password protection specifically, you must use Word or read the document as a Word file, password-protect it, and then share the protected version.