Password Strength - Excel
 

I have tried to protect a spreadsheet with a 252 character password made up
of Numbers, UCase, LCase and various Symbols. I know it works because if I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He said
it took less than 2 minutes with a commericial product and it came up with a
working unprotect password only 12 characters long (all UCase Letters and a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????

Password Strength - Excel
 

Visit JE McGimpsey's site:
http://mcgimpsey.com/excel/removepwords.html

Phil - Ohio wrote:

I have tried to protect a spreadsheet with a 252 character password made up
of Numbers, UCase, LCase and various Symbols. I know it works because if I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He said
it took less than 2 minutes with a commericial product and it came up with a
working unprotect password only 12 characters long (all UCase Letters and a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????

--

Dave Peterson

Password Strength - Excel
 

How is it possible for a 12 character password to unlock a 252 one ????

Regardless of the technical explanation, facts are facts....You've just
discovered that protecting an Excel file with a password is akin to locking
the door to your home. It only discourages inadvertent entry attempts and
the slightly dishonest. Anybody with serious intent can find their way in
with only moderate effort. If you need serious security, you won't find it
in Excel.

Does that help?
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)

"Phil - Ohio" <Phil - wrote in message
...
I have tried to protect a spreadsheet with a 252 character password made up
of Numbers, UCase, LCase and various Symbols. I know it works because if
I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He
said
it took less than 2 minutes with a commericial product and it came up with
a
working unprotect password only 12 characters long (all UCase Letters and
a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????

Password Strength - Excel
 

'You've just discovered that protecting an Excel file with a password is
akin to locking
the door to your home. It only discourages inadvertent entry attempts and
the slightly dishonest.'

Very good analogy.

Sheet protection is as good as useless with minimal coding knowledge and the
code freely available on these newsgroups. Workbook protection, and VB
editor protection can be broken with readily available commercial software
costing not very much at all.

I've always wondered why MS don't improve the security of Excel, if not
generally then at least as an optional extra. For a small company for
instance, Excel is perfect for payroll, staff databases like holidays etc,
but it's limited by the ever present security issue. It can't be that
difficult to make it secure, can it?

Regards,
Alan.

"Ron Coderre" wrote in message
...
How is it possible for a 12 character password to unlock a 252 one ????

Regardless of the technical explanation, facts are facts....You've just
discovered that protecting an Excel file with a password is akin to
locking the door to your home. It only discourages inadvertent entry
attempts and the slightly dishonest. Anybody with serious intent can find
their way in with only moderate effort. If you need serious security, you
won't find it in Excel.

Does that help?
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)

"Phil - Ohio" <Phil - wrote in message
...
I have tried to protect a spreadsheet with a 252 character password made
up
of Numbers, UCase, LCase and various Symbols. I know it works because if
I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He
said
it took less than 2 minutes with a commericial product and it came up
with a
working unprotect password only 12 characters long (all UCase Letters and
a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????

Password Strength - Excel
 

Nice description Ron , that's a keeper for this question


--

Regards,

Peo Sjoblom





"Ron Coderre" wrote in message
...
How is it possible for a 12 character password to unlock a 252 one ????

Regardless of the technical explanation, facts are facts....You've just
discovered that protecting an Excel file with a password is akin to
locking the door to your home. It only discourages inadvertent entry
attempts and the slightly dishonest. Anybody with serious intent can find
their way in with only moderate effort. If you need serious security, you
won't find it in Excel.

Does that help?
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)

"Phil - Ohio" <Phil - wrote in message
...
I have tried to protect a spreadsheet with a 252 character password made
up
of Numbers, UCase, LCase and various Symbols. I know it works because if
I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He
said
it took less than 2 minutes with a commericial product and it came up
with a
working unprotect password only 12 characters long (all UCase Letters and
a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????

Password Strength - Excel
 

Not the answer I was expecting, but perfectly understandable. In the future
I think I will take the extra time and code everything for VB7. Many Thanks

"Phil - Ohio" wrote:

I have tried to protect a spreadsheet with a 252 character password made up
of Numbers, UCase, LCase and various Symbols. I know it works because if I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He said
it took less than 2 minutes with a commericial product and it came up with a
working unprotect password only 12 characters long (all UCase Letters and a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????

Password Strength - Excel
 

Is protection in VB7 stronger?

Regards,
Stefi


€žPhil - Ohio€� ezt Ã*rta:

Not the answer I was expecting, but perfectly understandable. In the future
I think I will take the extra time and code everything for VB7. Many Thanks

"Phil - Ohio" wrote:

I have tried to protect a spreadsheet with a 252 character password made up
of Numbers, UCase, LCase and various Symbols. I know it works because if I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He said
it took less than 2 minutes with a commericial product and it came up with a
working unprotect password only 12 characters long (all UCase Letters and a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????

Password Strength - Excel
 

Thanks, Peo

-------------
Best Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)


"Peo Sjoblom" wrote in message
...
Nice description Ron , that's a keeper for this question


--

Regards,

Peo Sjoblom





"Ron Coderre" wrote in message
...
How is it possible for a 12 character password to unlock a 252 one ????

Regardless of the technical explanation, facts are facts....You've just
discovered that protecting an Excel file with a password is akin to
locking the door to your home. It only discourages inadvertent entry
attempts and the slightly dishonest. Anybody with serious intent can find
their way in with only moderate effort. If you need serious security,
you won't find it in Excel.

Does that help?
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)

"Phil - Ohio" <Phil - wrote in message
...
I have tried to protect a spreadsheet with a 252 character password made
up
of Numbers, UCase, LCase and various Symbols. I know it works because
if I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He
said
it took less than 2 minutes with a commericial product and it came up
with a
working unprotect password only 12 characters long (all UCase Letters
and a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????

Password Strength - Excel
 

VB executable programs use compiled code. VBA runs interpreted code,..the
programming can be viewed.

I hope that helps.
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)



"Stefi" wrote in message
...
Is protection in VB7 stronger?

Regards,
Stefi


"Phil - Ohio" ezt írta:

Not the answer I was expecting, but perfectly understandable. In the
future
I think I will take the extra time and code everything for VB7. Many
Thanks

"Phil - Ohio" wrote:

I have tried to protect a spreadsheet with a 252 character password
made up
of Numbers, UCase, LCase and various Symbols. I know it works because
if I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He
said
it took less than 2 minutes with a commericial product and it came up
with a
working unprotect password only 12 characters long (all UCase Letters
and a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????

Password Strength - Excel
 

Thanks Ron, does it mean that VB7 produces compiled code? I haven't met VB7
before.

Regards,
Stefi

€žRon Coderre€� ezt Ã*rta:

VB executable programs use compiled code. VBA runs interpreted code,..the
programming can be viewed.

I hope that helps.
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)



"Stefi" wrote in message
...
Is protection in VB7 stronger?

Regards,
Stefi


"Phil - Ohio" ezt Ã*rta:

Not the answer I was expecting, but perfectly understandable. In the
future
I think I will take the extra time and code everything for VB7. Many
Thanks

"Phil - Ohio" wrote:

I have tried to protect a spreadsheet with a 252 character password
made up
of Numbers, UCase, LCase and various Symbols. I know it works because
if I
change just one character somewhere in that string, the sheet fails to
unprotect. I then sent it to a friend to see if he could break it. He
said
it took less than 2 minutes with a commericial product and it came up
with a
working unprotect password only 12 characters long (all UCase Letters
and a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one ????

Password Strength - Excel
 

From what I recall (and just Googled to make sure), VB.NET (VB7) does run
compiled code,
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)

"Stefi" wrote in message
...
Thanks Ron, does it mean that VB7 produces compiled code? I haven't met
VB7
before.

Regards,
Stefi

"Ron Coderre" ezt írta:

VB executable programs use compiled code. VBA runs interpreted code,..the
programming can be viewed.

I hope that helps.
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)



"Stefi" wrote in message
...
Is protection in VB7 stronger?

Regards,
Stefi


"Phil - Ohio" ezt írta:

Not the answer I was expecting, but perfectly understandable. In the
future
I think I will take the extra time and code everything for VB7. Many
Thanks

"Phil - Ohio" wrote:

I have tried to protect a spreadsheet with a 252 character password
made up
of Numbers, UCase, LCase and various Symbols. I know it works
because
if I
change just one character somewhere in that string, the sheet fails
to
unprotect. I then sent it to a friend to see if he could break it.
He
said
it took less than 2 minutes with a commericial product and it came
up
with a
working unprotect password only 12 characters long (all UCase
Letters
and a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one
????

Password Strength - Excel
 

Thanks, I think then I'll follow Phil. The only problem that in this case my
users also have to follow me.
Regards,
Stefi


€žRon Coderre€� ezt Ã*rta:

From what I recall (and just Googled to make sure), VB.NET (VB7) does run
compiled code,
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)

"Stefi" wrote in message
...
Thanks Ron, does it mean that VB7 produces compiled code? I haven't met
VB7
before.

Regards,
Stefi

"Ron Coderre" ezt Ã*rta:

VB executable programs use compiled code. VBA runs interpreted code,..the
programming can be viewed.

I hope that helps.
--------------------------

Regards,

Ron (XL2003, Win XP)
Microsoft MVP (Excel)



"Stefi" wrote in message
...
Is protection in VB7 stronger?

Regards,
Stefi


"Phil - Ohio" ezt Ã*rta:

Not the answer I was expecting, but perfectly understandable. In the
future
I think I will take the extra time and code everything for VB7. Many
Thanks

"Phil - Ohio" wrote:

I have tried to protect a spreadsheet with a 252 character password
made up
of Numbers, UCase, LCase and various Symbols. I know it works
because
if I
change just one character somewhere in that string, the sheet fails
to
unprotect. I then sent it to a friend to see if he could break it.
He
said
it took less than 2 minutes with a commericial product and it came
up
with a
working unprotect password only 12 characters long (all UCase
Letters
and a
sequence not found in the 252 one).

How is it possible for a 12 character password to unlock a 252 one
????