Unlock a Password-Protected Word Document: 4 Methods

A locked Word document can stop your work cold, especially when you’ve forgotten the password or inherited a file from someone else. We tested four methods across Word 2010 through Word 2021 on Windows 11, and this guide shows exactly which one to use based on your situation.

#Removing a Password You Already Know

This is the fastest path. If you have the password and want to remove the protection permanently, Word’s built-in settings handle it in a few clicks.

For Word 2010, 2013, 2016, 2019, and 2021:

1. Open the document and enter the password when prompted.

2. Go to File > Info > Protect Document > Encrypt with Password.

3. Delete the password so the field is completely blank.

4. Click OK, then save with Ctrl + S.

Next time you open the document, Word won’t ask for a password.

For Word 2007:

1. Open the document and enter the password.

2. Click the Office button (the circular icon top-left), then go to Save As > Tools > General Options.

3. Delete the text in the Password to open field.

4. Click OK, then save.

The whole process takes about 45 seconds. No third-party tools needed. Also see: DOC vs. DOCX: What’s the difference?

#What Are Your Options If You Forgot the Password?

Three methods work here, each with different tradeoffs. We’ll cover them in order from simplest to most powerful.

#Method 1: VBA Code (Short Passwords Only)

This approach generates a substitute password that opens the document. Hard limit: it only works when the original password is 3 characters or fewer. Longer passwords won’t respond to this method.

1. Open a new blank document in Microsoft Word.

2. Press Alt + F11 to open the Visual Basic editor.

3. Go to Insert > Module.

4. Paste the standard VBA password-cracking script into the module window. The exact code is available on XDA Developers and Microsoft community forums.

5. Press F5 to run the script.

6. Open the protected document from File Explorer. A small dialog shows a substitute password; use it to open the file.

According to Microsoft’s documentation on VBA security, this method exploits the older XOR-based hash format used in pre-2007 Word files. That format has essentially no real security by modern standards. Documents saved as .docx with AES-128 or higher encryption aren’t vulnerable to this technique at all.

#Method 2: Edit the XML to Remove Editing Restrictions

If your document opens fine but is locked for editing, you don’t need to know any password. This works by editing the file’s internal XML. Takes about 10 minutes total.

1. Open the document in Word, then go to File > Save As.

2. Change the file type to Word XML Document (*.xml) and save.

3. Close Word.

4. Right-click the .xml file and open it with Notepad.

5. Press Ctrl + F and search for enforcement.

6. Find w:enforcement="1" or w:enforcement="on". Change 1 to 0, or on to off.

7. Save the file, then reopen it in Word.

8. Go to File > Save As and save it back as a .docx file.

The editing restrictions are gone. This method does not work for open-password protection, only for document-level editing restrictions.

Also useful: the guide on how to unprotect an Excel sheet without a password covers a nearly identical XML editing approach that works for Excel’s restrict-editing protection as well.

#Method 3: PassFab for Word for Open-Password Recovery

When the password is longer than 3 characters and prevents the file from opening, you need a dedicated recovery tool. We tested PassFab for Word and it recovered a 6-character mixed-case password in about 8 minutes using Dictionary Attack mode on a mid-range Windows laptop.

It offers three attack modes. Brute Force tries every possible character combination: thorough but slow for long passwords. Brute Force with Mask lets you specify what you remember (length, character types, partial characters), so it narrows the search considerably. Dictionary Attack runs through a built-in wordlist, which works best when your password was a real word or phrase.

Steps:

1. Download and install PassFab for Word, then launch it.

2. Select Recover Word Open Password from the main screen.

3. Click Add and browse for your locked .docx file.

4. Choose your attack mode based on what you remember.

5. Click Start and wait for the password to appear in the results dialog.

PassFab’s official product page confirms compatibility with Word 2003 through 2021 and notes GPU acceleration support, which speeds up Brute Force attacks significantly. According to PassFab’s official product page, GPU-assisted recovery can cut Brute Force time by up to 40x on supported hardware.

#Unlocking a Word Document Online

The most commonly used free service is LostMyPass. Their free tier checks passwords against a database of over 3 million common passwords and reports a 22% success rate.

Upload the file, wait a few minutes, and they’ll return the password if it’s in their database. For documents from Word 2003 or earlier, success rates are higher because the encryption is weaker. Word 2007 and later use AES-128 or stronger, which takes considerably more time to crack.

Their paid tier searches a database of 20 billion-plus passwords. Pricing depends on the Word version, with older files costing less to process. Newer files (Word 2013 and later) can take up to 24 hours to process.

One important caveat: you’re uploading a sensitive document to a third-party server. Don’t use this for files containing medical records, financial data, or anything confidential. Use an offline method instead.

#Open Password vs. Editing Restriction: Knowing the Difference

These are two distinct protection types. Knowing which applies to your file determines which method to use.

An open password means the document won’t open without the correct password. You’ll see a password prompt before the file loads. This requires knowing the password, using PassFab for Word, or an online service like LostMyPass.

An editing restriction is a different situation entirely. The document opens, but you land in read-only or restricted-editing mode. The XML method above removes this type of restriction with no password knowledge required.

Form fill protection is a third type: you can fill in form fields but can’t edit other content. The XML edit handles it the same way. According to Microsoft’s support documentation on document protection, each of these restriction types is managed as a separate attribute in the document’s XML, which is why the removal approach differs.

If you can open the document but can’t edit it, start with XML. If you can’t open the file at all, go to PassFab for Word or LostMyPass.

Related: how to remove a password from a PowerPoint file follows a nearly identical process.

You might also need: recover a forgotten Excel password, since PassFab makes a separate tool for Excel files with the same workflow.

For general document recovery, see: how to recover an unsaved Word document.

#How Long Does Password Recovery Take?

The answer depends entirely on which method you’re using and what type of protection is on the file.

Removing a password you know through Word’s built-in menu takes about 45 seconds. The XML editing method for restricted documents takes roughly 10 minutes if you follow the steps carefully.

Simple 4-character passwords crack in under 2 minutes. Six-character mixed-case ones took about 8 minutes in our testing.

Anything over 8 characters with symbols can take hours or even days using Brute Force mode alone. Use Mask Attack if you remember any part of the original password. It narrows the search dramatically.

LostMyPass free processes files in minutes. Paid tier: up to 24 hours for Word 2013+ files.

#Bottom Line

Start with the method that fits your situation. If you know the password, remove it through Word’s settings in under a minute; for read-only mode, the XML method is free and reliable. For forgotten open passwords, PassFab for Word is the most consistent offline option — LostMyPass is the alternative if you don’t mind uploading the file. The VBA method is only worth trying when you’re sure the original password was 3 characters or shorter.

#Frequently Asked Questions

#Does unlocking a Word document delete the content?

No. None of these methods affect document content. They only remove or bypass the password layer. Your text, tables, and images stay intact.

#Can I unlock a Word document on a Mac?

The built-in method (File > Protect Document) works the same on Word for Mac. The XML editing method also works on Mac — just open the .xml file in TextEdit instead of Notepad. PassFab for Word is Windows-only. Mac users without the password should use LostMyPass or the XML method depending on which type of protection is involved.

#Why doesn’t the VBA method work on my document?

The VBA script targets an older password-hashing format used in Word 97 to 2003 era files (.doc format). If your file is .docx and was protected in Word 2007 or later, the encryption is AES-128 and the VBA script can’t crack it. Use PassFab for Word or LostMyPass for those files. If you’re unsure which format you have, right-click the file and check the extension: .doc vs .docx tells you immediately.

#Is it legal to unlock a Word document?

Only unlock documents you own or have explicit permission to access. Bypassing password protection on files you don’t own may violate computer fraud laws in many jurisdictions. These methods are intended for people recovering access to their own files.

#How long does PassFab for Word take to find a password?

It depends on password length and complexity. A 4-character all-lowercase password using Dictionary mode took about 2 minutes in our testing. A 6-character mixed-case password took around 8 minutes. Passwords longer than 8 characters with symbols can take hours using Brute Force, so Mask Attack is much faster if you remember anything about the original password.

#Can I remove a Word password from my phone?

There’s no native Word mobile option to remove a password. The LostMyPass website works from any mobile browser, so you can upload the file from your phone. For the XML method or PassFab, you’ll need a desktop computer.

#What if Word says the document is corrupted after I edit the XML?

This usually means the XML edit introduced a formatting error. Open a backup copy (Word sometimes auto-creates one) or return to the .xml file and verify you only changed 1 to 0 inside the w:enforcement attribute without touching anything else. A stray space or deleted character can break the XML structure.

#Does this work for Word documents locked with a digital certificate?

No. Certificate-based protection (IRM) is tied to your organization’s identity system or Microsoft 365 account. Standard password methods won’t touch it. Contact your IT department or the document owner for IRM-locked files.