How to Password Protect a SharePoint Document
Sometimes a document needs an extra lock — a password that recipients need to open it. Use sparingly, never as a substitute for proper permissions.
What it is
Password protection is a feature in Word, Excel, PowerPoint, and PDFs that requires recipients to enter a password before they can open the file. It adds a layer of access control independent of SharePoint permissions — useful when a file might travel outside your normal access controls (downloaded, emailed, copied).
The right use case for password protection is narrow. Imagine a sensitive HR document that has to be emailed to an external lawyer. The recipient won’t have access to your SharePoint, so SharePoint permissions don’t help. A password gives you a basic gate: only someone with the password can open the file.
What password protection is not good for is everyday access control inside your organisation. SharePoint permissions are far better — they’re enforceable, auditable, easy to manage, and don’t require anyone to remember a password. If you find yourself password-protecting files for internal sharing, you’re working around a permissions problem instead of solving it.
Never email the password with the file
If a sensitive file needs a password, the password must travel through a different channel. Email the file. Text the password. Or: phone the recipient with the password. Sending the password in the same email as the file defeats the protection entirely — anyone who intercepts the email gets both.
When to use this
- When you need to email a sensitive file to someone outside your SharePoint permissions.
- When you’re sharing a document that might be forwarded and you want a basic gate on access.
- When your tenant’s policies require password protection for certain content classifications.
- Almost never for internal sharing — use SharePoint permissions instead.
How to do it
- Open the file in the desktop app (Word, Excel, PowerPoint).
- Go to File → Info → Protect Document → Encrypt with Password.
- Set a strong password (long, random, not reused from other systems).
- Save the file. The password is now required to open it.
- Save the file back to SharePoint or send the protected copy.
- Communicate the password through a different channel (text, phone, separate email).
- Remember: if you forget the password, the file is essentially lost.
Best practices
- Prefer SharePoint permissions over passwords for internal sharing. Permissions are easier to manage and audit.
- Use strong, unique passwords. A weak password is barely a deterrent.
- Never put passwords in the same email or message as the file. Defeats the protection.
- Document who has the password (but not the password itself). So you can revoke access if needed.
Common mistakes
- Using passwords for internal access control. SharePoint permissions are better for everything inside your org.
- Reusing passwords across files. One leaked password compromises every file with that password.
- Forgetting the password. There’s no ‘forgot password’ link. Lost passwords = lost files.
The SharePoint Essentials System is the most comprehensive end-user guide in the range. 7 modules, 35 slides covering navigation, libraries, views, lists, metadata, permissions, and decision trees — updated for the new 2026 SharePoint App Bar.
Get the Essentials System — $37 →FAQ
How do I password protect a SharePoint Word document?
Open the document in Word. Choose File -> Info -> Protect Document -> Encrypt with Password. Set a password. Save back to SharePoint. The file is encrypted; anyone opening it (including you) needs the password. Lose the password and the file becomes unrecoverable — no backdoor.
Should I use a password or a sensitivity label in SharePoint?
Sensitivity labels for most cases — they integrate with Microsoft 365, support automatic protection based on content, and don’t risk lost-password lockout. Document passwords only when you need to send a single file to someone outside your tenant and can share the password through a separate channel.
What happens if I forget a SharePoint document password?
The file is permanently inaccessible. Microsoft cannot recover it; SharePoint admins cannot recover it. This is the strongest argument against document passwords for ongoing work — one forgotten password and the content is gone. Use sensitivity labels with managed encryption instead, where IT can recover the keys.
Can I password protect a SharePoint folder?
Not directly — SharePoint folders use permissions, not passwords. Restrict folder access to specific people via Manage Access. For external sharing where you can’t use organisation permissions, use sensitivity labels with encryption rather than password-protecting individual files.