Hi all,

I have an Excel 2010 workbook that contains some highly sensitive information. Not being much of an excel user, I'm hoping someone can provide some pointers on the best way to secure this data from unwanted eyes.

I see the "Protect Workbook" option with options for Structure and Windows, and an optional Password. What is Structure/Windows protection, and if I apply a password here will that sufficiently keep others from opening the file without the password? Is there any further considerations?

I actually plan to wrap this in a small TrueCrypt volume, as it won't be accessed often. Of this I'm quite sure I can keep people out, but I'd still like the file itself protected as well.

Thanks for any insight.

Just a warning, In an MVP discussion it was brought to my attention (because I asked a question relating to this subject) that it takes litterally 2 second to override password protection in Excel workbooks. So securing an Excel workbook is basically not possible! I was floored at how easy it is to get around the security.

Hi Jack

This topic covers how to Protect/Lock specific cells in a workbook

Lock Cells in Workbook

You can also apply a Password so that the file cannot be opened by unwanted users

Thanks Mike. It's the whole file I don't want people to have access to rather than specific cells, but thanks for the info. Being that I don't know much about excel other than how to do simple forumlas, I'll take any pointers I can get!

Daniel, I was wondering about being able to override. I had suspected maybe it was possible but wasn't sure.

In any case, I'll use some non-excel security measures to restrict access to the file itself rather than using the file to restrict access to the data inside. That'll work for me.

Thanks for the input guys.

Cheers,

Jack,

I would also approach it outside of excel. Maybe using the attribute property to hidden.

I'll use TrueCrypt for it. It's an open source encryption program that allows you to create an encrypted file that acts as a drive when it's mounted (among other features). Besides the standards in encryption algorithms and hashes, it allows the use of keyfiles as part of the passphrase.

With 128bit encryption and a passphrase, the only practical way someone will find their way in is with a keylogger installed on my system. With that plus a keyfile, they'll need to dig a lot deeper.

I've been using TrueCrypt for a number of years now to wrap up company backups that go offsite (separate physical locations). It'll be more than sufficient in this case.

Thanks all,