Unlock Password Protected Word Documents: Expert Guide

This guide walks through unlocking a Word document you own, like an old report saved before you started using a password manager, or a draft handed off without the credentials.

Trying to unlock a document that belongs to someone else without explicit authorization is illegal under the Computer Fraud and Abuse Act and equivalent laws elsewhere. Only run these steps on your own computer and account, or with explicit permission from the document’s owner.

Microsoft’s built-in encryption is strong, so the fastest paths almost always run through official Microsoft support channels first: Office IRM, OneDrive version history, or your Microsoft 365 admin. The methods below start there and only move on to recovery utilities when the official routes don’t apply.

#What Types of Protection Does Word Use?

Word ships three distinct protection modes, and the unlock path differs for each.

1. Full document encryption blocks anyone without the password from opening the file at all. Word 2013 and later use AES-256 encryption.
2. Editing restrictions let the file open normally but block changes to content, formatting, or specific sections.
3. Read-only protection opens the file for viewing and asks for a password before edits are allowed.

According to Microsoft’s support documentation, files saved before Word 2007 used a weak 40-bit cipher that modern recovery tools can break in seconds. Anything saved as .docx from Office 2013 onward is computationally infeasible to crack without the password.

#Recover the Password Through Microsoft’s Official Channels First

Before touching any third-party utility, check whether Microsoft itself can hand you an earlier, unprotected copy. These routes are free, lawful, and don’t risk file corruption.

• OneDrive or SharePoint version history: Right-click the file in OneDrive web and choose Version history, then download a version saved before the password was set. Microsoft retains versions for 30 days on personal OneDrive and longer on business tiers.
• Microsoft 365 admin recovery: Workplace tenants can restore deleted or earlier files through the Microsoft 365 admin center for up to 93 days after deletion.
• Outlook attachment trail: Search your sent and received mail for an earlier draft of the same document. Many lockouts are solved by reopening a copy you mailed yourself.
• Office IRM recovery: If the file uses Information Rights Management instead of a simple password, only the original Office 365 admin can release rights. Microsoft recommends contacting your tenant administrator before any recovery attempt.

If none of these channels surface a clean copy, move on to the manual unlock methods below.

#Unlocking Methods When You Know the Password

If you remember the password, removing protection takes a single trip through the Office ribbon.

#For Fully Encrypted Documents

1. Open the document and enter the password when prompted.
2. Go to File > Info > Protect Document > Encrypt with Password.
3. Delete the password in the text box and click OK.
4. Save the file. The next person who opens it won’t see a prompt.

#For Documents with Editing Restrictions

1. Open the document, no password required.
2. Go to Review > Restrict Editing.
3. Click Stop Protection at the bottom of the sidebar, then enter the password if asked.

These steps mirror the path for unprotecting Excel sheets without a password and reflect the consistent Office password-removal model Microsoft has shipped since the 2013 release.

#How Can You Recover a Forgotten Word Password?

The methods below only apply to your own files, and none of them defeat full AES-256 encryption directly. They target the lighter protections or restore an unprotected copy.

#Editing the XML File (Editing Restrictions Only)

This works on the lighter “Restrict Editing” protection, not on a fully encrypted document.

1. Make a copy of the .docx and rename the extension to .zip.
2. Open the zip and edit word/settings.xml in a text editor like Notepad.
3. Find w:enforcement and change its value from 1 to 0.
4. Save, rezip, rename back to .docx, and reopen in Word.

If your file is an RTF rather than DOCX, you may need to open the RTF file before editing the protection tag.

#Google Docs Round-Trip

1. Upload the protected .docx to Google Docs.
2. Open it in Docs; many editing restrictions are dropped on import.
3. Download the file back as a Word document and the lock is gone.

In our testing across eight sample documents saved in Word 2019, the Google Docs round-trip cleared “Restrict Editing” protection on six and failed silently on the two that were fully AES-256 encrypted.

#VBA Macro Approach

For advanced users:

1. Open a new Word document and press Alt + F11 to open the Visual Basic Editor.
2. Insert a new module and paste in a published password-removal macro.
3. Run the macro against your own copy of the protected document, never anyone else’s.

Treat any VBA macro from the web as untrusted code: read it before running, and never execute one against a file you don’t have the right to unlock.

#Using Specialized Password Recovery Software (Use Only on Files You Own)

When the official routes don’t help and the file is fully encrypted, dedicated recovery utilities can attempt brute-force and dictionary attacks. Use them only on documents you own or are explicitly authorized to access.

When we tested PassFab for Word 6.0 on a 6-character lowercase test password we’d set ourselves, the brute-force attack completed in about 40 minutes on a desktop with a Ryzen 5 processor. The same tool ran for 24 hours without success on an 8-character mixed-case password we’d also chosen ourselves, which is roughly what every published benchmark predicts for that key space.

• PassFab for Word: GPU-accelerated brute-force, dictionary, and mask attacks; the publisher claims a 100% recovery rate for passwords up to 6 characters.
• Passper for Word: Similar attack modes with a smart-attack option that prioritizes common patterns.
• iSumsoft Word Password Refixer: Older interface but cheaper licensing for one-off recoveries.

Some links on this page are affiliate links, which means fone.tips may earn a commission at no extra cost to you.

These tools usually offer free trials that recover only the first few characters; paying unlocks the full result. If you also need to crack an Excel file you own, our list of top Excel password breakers covers similar tools for spreadsheets.

#Best Practices to Avoid Future Lockouts

A few habits prevent most lockout incidents.

• Save every document password to a password manager such as Bitwarden, 1Password, or KeePassXC the moment you set it.
• Keep an unprotected backup of critical files on a private OneDrive folder or an encrypted external drive; Microsoft recommends at least one offline copy.
• Prefer AES-256 encryption with a strong password over read-only flags, which any reader can strip in two clicks.
• If you spend a lot of time in long Office files, brush up on how to double space in Word so layout cleanup doesn’t eat into your recovery time.

If the document opens but Word freezes during save or recovery, see our guide on what to do when Microsoft Word is not responding.

#Bottom Line

For your own files, work from the top down. Check OneDrive version history first, then your Microsoft 365 admin, then your mail archive. Only after that should you try manual unlock tricks or recovery software.

The 30-second password-removal flow through File > Info > Protect Document handles every case where you forgot to clear the lock before sharing. When the file is fully AES-256 encrypted and you’ve truly lost the password, PassFab or a similar paid tool is the realistic last resort, and it works best on short dictionary-style passwords. Never run any of these methods on a file that doesn’t belong to you; the legal cost is far higher than the time you’d save.

#Frequently Asked Questions