Microsoft Word has built-in password protection that encrypts the document file itself using AES. This means the file cannot be opened — by anyone — without the correct password. It is one of the most reliable ways to lock down a document before sharing or storing it. This guide covers the exact steps for Windows and Mac, plus what the protection actually covers (and what it doesn't).
How to Password Protect a Word Document on Windows
- Open the Word document you want to protect.
- Click File in the top-left corner to open the backstage view.
- Click Info in the left sidebar.
- Click the Protect Document button (it has a padlock icon).
- Select Encrypt with Password from the dropdown.
- In the dialog box, type a strong password and click OK.
- Re-enter the password to confirm and click OK again.
- Press Ctrl + S to save the file. The password is now embedded.
What "Protect Document" Panel Shows
After setting a password, the Info pane shows a yellow banner reading "A password is required to open this document." This confirms the encryption is active. The banner stays visible every time you open the backstage view for that file.
How to Password Protect a Word Document on Mac
Method 1 — Word for Mac (Recommended)
- Open the document in Microsoft Word for Mac.
- Click File in the menu bar.
- Select Protect Document…
- Check Encrypt this document and require a password to open.
- Enter and confirm your password, then click OK.
- Save the file with Cmd + S.
Method 2 — macOS Save As Dialog
An alternative path: go to File → Save As (or File → Save a Copy), expand the dialog options, check Encrypt the file with a password, enter the password, and save.
How to Set a "Password to Modify" (Read-Only Protection)
Word also lets you set a separate password that allows recipients to open and read the document but not edit it without the second password. This is different from the encryption password:
- Go to File → Save As.
- Click Tools (Windows) or Options (Mac) in the save dialog.
- Select General Options.
- Enter a Password to open and/or a separate Password to modify.
- Click OK, confirm both passwords, and save.
How to Remove a Password from a Word Document
- Open the file and enter the correct password when prompted.
- Go to File → Info → Protect Document → Encrypt with Password.
- In the password dialog, delete all characters from the password field.
- Click OK — the field should now be empty.
- Save the file. The document is now unprotected.
Understanding Word's Encryption Strength
Modern Word (2013 and Later) — AES-256 or AES-128
Word 2013 and all later versions (including Microsoft 365) use AES-128 or AES-256 encryption depending on the Office version, with SHA-512 key derivation. This is the same encryption standard used in full-disk encryption tools like BitLocker. If you use a strong, unique password, a Word document encrypted with a modern version of Office is genuinely secure.
Older Word Versions (2007-2010) — AES-128
Word 2007 and 2010 used AES-128, which is still considered secure. If you are sharing files with recipients using these older versions, compatibility should be fine — the format is preserved.
Very Old Formats (Word 97-2003, .doc) — RC4, NOT Secure
The old .doc format used RC4 encryption, which is cryptographically broken. Anyone with basic tools can remove RC4-based Word passwords in seconds. Never save as .doc format if security matters. Always use .docx.
.doc (Word 97-2003) file downgrades the encryption to RC4 — which is weak and can be bypassed. Always keep files in .docx format to maintain AES encryption.
What Word Password Protection Does and Doesn't Cover
| Scenario | Protected? | Notes |
|---|---|---|
| Unauthorized person opens the file | Yes | AES encryption prevents reading without the password |
| Password is guessed or brute-forced | No | Weak passwords can be cracked; strength matters enormously |
| File is transmitted over the internet | Partially | The file is encrypted, but metadata (filename, size, sender) is visible |
| Recipient receives the password via email | Reduced | The password and the encrypted file are both in email — if email is compromised, both are exposed |
| Revision history / comments | Yes | All revisions and comments are included in the encrypted file |
| Metadata (author, dates, company) | Yes | Document properties are encrypted within the file |
| Server-side access by cloud provider | No | If stored on OneDrive/Google Drive unencrypted, provider can access the file |
When Word Password Protection Isn't Enough
Word encryption protects the file itself — but the moment you send it to someone, you've created new attack vectors:
- The password is usually sent separately (email, SMS) and can be intercepted
- If stored in a cloud service without client-side encryption, the provider can access the plaintext
- Once the recipient enters the correct password, the decrypted document is in memory and on disk — it can be forwarded, printed, or copied instantly
- The file can still be discovered in file system searches, backup snapshots, and email attachments
For documents containing financial data, legal information, medical records, or personally identifiable information, a stronger approach is to use zero-knowledge file sharing — where the decryption key never touches the server.
Share Documents with Zero-Knowledge Encryption
FileShot encrypts your document in your browser with AES-256-GCM before it ever leaves your device. The decryption key lives only in the share link fragment — the server never sees it. Your file is inaccessible to anyone without the link, including FileShot itself.
Upload & Share Securely Encryption ToolHow FileShot Compares to Word Password Protection
| Feature | Word Password | FileShot Zero-Knowledge |
|---|---|---|
| Encryption algorithm | AES-128/256 (modern Word) | AES-256-GCM |
| Key location | Derived from password, stored in file | URL fragment only — never transmitted to server |
| Server can access plaintext? | No (if key never transmitted) | No — cryptographically impossible |
| Sharing method | Share file + password separately | Share a single encrypted link |
| Link expiry | No | Yes — set expiry from 1 hour to custom |
| No account required | N/A | Yes — free with no sign-up |
| Works with any file type | No (Word only) | Yes — any file up to 10 GB free |
How to Create a Strong Password for a Word Document
The quality of Word's AES encryption is only as good as the password protecting it. Common rules:
- Minimum 12 characters — preferably 16+
- Mix types: uppercase, lowercase, numbers, symbols
- Avoid dictionary words even with substitutions (
p@ssw0rdis still weak) - Use a passphrase: four random words like
TurquoiseGolfDesignerMuffinis both memorable and strong - Never reuse passwords across documents or services
- Use a password manager (Bitwarden, 1Password, KeePass) to generate and store document passwords
Frequently Asked Questions
How do I password protect a Word document?
In Word, go to File → Info → Protect Document → Encrypt with Password. Enter a password and click OK. Save the file — it will now require the password to open.
Is Word document password protection secure?
Modern Word (2013 and later) uses AES-128 or AES-256 encryption, which is strong if you use a complex password. The .doc format (Word 97-2003) used RC4, which is weak and easily bypassed. Always save as .docx.
How do I remove a password from a Word document?
Open the file, go to File → Info → Protect Document → Encrypt with Password, clear the password field completely, click OK, and save. The document is now unprotected.
How do I password protect a Word document on Mac?
Open the document in Word for Mac, go to File → Protect Document, check Encrypt this document and require a password to open, enter and confirm the password, then save with Cmd + S.
What happens if I forget my Word document password?
There is no official recovery method. Microsoft does not maintain a backdoor. You would need a password recovery tool (which may or may not succeed depending on password complexity) or the file becomes inaccessible. Always store document passwords in a password manager.
Can I password protect a Word document on mobile?
The Word mobile app (iOS and Android) does not currently support setting an encryption password. You must use Word on Windows or Mac to add document-level password protection. To share securely from mobile, use FileShot.io — zero-knowledge encrypted sharing works from any device and browser.
Need to Share a Sensitive Document Right Now?
Upload any file to FileShot and get a zero-knowledge encrypted link in seconds. Works on every device — no Word required, no account required.
Share a Document FreeSee also: How to Password Protect a PDF • How to Password Protect a ZIP File • How to Encrypt a File • What is Zero-Knowledge Encryption?