View Single Post
  #4   Report Post  
Posted to microsoft.public.excel.worksheet.functions
Alan Alan is offline
external usenet poster
 
Posts: 492
Default Password Strength - Excel

'You've just discovered that protecting an Excel file with a password is
akin to locking
the door to your home. It only discourages inadvertent entry attempts and
the slightly dishonest.'

Very good analogy.

Sheet protection is as good as useless with minimal coding knowledge and the
code freely available on these newsgroups. Workbook protection, and VB
editor protection can be broken with readily available commercial software
costing not very much at all.

I've always wondered why MS don't improve the security of Excel, if not
generally then at least as an optional extra. For a small company for
instance, Excel is perfect for payroll, staff databases like holidays etc,
but it's limited by the ever present security issue. It can't be that
difficult to make it secure, can it?

Regards,
Alan.

"Ron Coderre" wrote in message
...
How is it possible for a 12 character password to unlock a 252 one ????


Regardless of the technical explanation, facts are facts....You've just
discovered that protecting an Excel file with a password is akin to
locking the door to your home. It only discourages inadvertent entry
attempts and the slightly dishonest. Anybody with serious intent can find
their way in with only moderate effort. If you need serious security, you
won't find it in Excel.

Does that help?
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)

"Phil - Ohio" <Phil - wrote in message
...
I have tried to protect a spreadsheet with a 252 character password made
up
of Numbers, UCase, LCase and various Symbols. I know it works because if
I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He
said
it took less than 2 minutes with a commericial product and it came up
with a
working unprotect password only 12 characters long (all UCase Letters and
a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????