# Can you password protect a Google Sheet?

No. Google Sheets has no password to open a file. Sharing decides who can open it, and anyone who can open a sheet of logins can read every password in it.

Updated: October 16, 2026

Google Sheets has no setting that asks for a password before a file opens. Its help page on protecting sheets says you can't "protect data with a password." Who can open a file is set by its sharing settings, and protecting a sheet or a range only decides who can edit it.

## What to use instead of a password, and its limits

| Setting | What it stops | What it doesn't stop |
| --- | --- | --- |
| Share with named people (General access set to "Restricted") | People you didn't add opening the file | The people you added reading everything in it |
| Limit who can download, copy and print | Copies made with Google's download, copy and print options | Copies made any other way |
| Protect a sheet or range | People you didn't choose editing it | Viewing, or printing and exporting a copy |
| Hide a sheet | The tab showing up on screen | Viewers reaching the content of the tab |

If General access is "Anyone with the link" instead of "Restricted," the file opens for whoever has the link, with no Google sign-in.

Protecting and hiding don't reduce who can see the data. Google's help page says plainly of protection: "This shouldn't be used as a security measure." It adds that a protected spreadsheet can still be printed, copied and exported. For hiding, it says: "Spreadsheet viewers can still access content in hidden sheets." So hiding or protecting a password column leaves the passwords readable by everyone who can open the file.

## Hiding part of a sheet means splitting the file

Sharing settings apply to the whole file. The Google help pages cited here describe no setting that shows a tab or a column to some viewers and not others. So if some people shouldn't see part of a sheet, move that part into its own file and share that file with fewer people.

[What to fix first when your passwords live in a spreadsheet](/guides/shared-accounts/spreadsheet-password-management) walks through narrowing who can open a file, step by step. Two more settings aren't covered there.

- On eligible work or school accounts, you can give a person's access an expiration date. This suits someone who helps for a fixed period.
- A Google Workspace admin can turn off sharing outside the organization, or allow it only with "Allowlisted Domains" (the part of an email address after the @). This takes the Drive & Docs administrator privilege.

## How an Excel password compares

Microsoft Excel can put a password on a file. Microsoft's steps are File, then Info, then Protect Workbook, then Encrypt with Password. Encrypting scrambles the file so it can't be read without the password, so people who don't know the password can't open it.

Everyone who uses the file still has to be told that password. Microsoft's help page warns that "You still run the risk of passwords falling into the hands of unintended users." If the password is forgotten, Microsoft can't recover it.

So moving a sheet of logins to Excel doesn't change who can read the passwords inside. Everyone who uses the file knows both the file's password and the passwords in it. Each time someone leaves, you change the file's password and every password they saw, then send them out again. If you send them by chat, those messages stay too ([How to stop sending passwords over Slack, Teams and email](/guides/shared-accounts/stop-sending-passwords-in-chat)).

## What a sheet of logins still leaves

The settings above shrink the number of people who can open the file and the ways to copy it. They can't make someone forget a password they read or delete a copy they kept. So with a sheet of usernames and passwords, decide first whether the passwords should stay in it at all.

There are two broad ways to take them out. One shares the password with people. A [password manager](/guides/shared-accounts/what-is-password-manager) is the common example: people see it, or let the manager fill it in. The other keeps the password from people. Only admins hold it, and a tool fills it in when someone signs in. [Managing shared accounts](/guides/shared-accounts) compares the options, and the spreadsheet article above sets out the order for moving passwords out.

After the passwords are out, the sheet can stay as a list of which account on which service each person uses. With no passwords in it, nobody who opens it can use it to sign in.


## Frequently asked questions

**Can I hide some tabs or columns from certain people?**

You can hide a tab, but Google says viewers can still access content in hidden sheets. Move what some people shouldn't see into a separate file, and share that file with fewer people.

**Does protecting a sheet stop people from seeing it?**

No. Protection stops edits, not viewing. Google's help page says protection shouldn't be used as a security measure.

**Is sharing with "Anyone with the link" safe enough?**

A file shared that way opens for whoever has the link, with no Google sign-in. If the link is forwarded, the new person can open it too. For anything private, share with named people.

**Should I move the sheet to Excel and add a password?**

People without the password can't open it, but everyone who uses the file needs the password, so you share one more password. Microsoft can't recover it if it's forgotten.

**If I turn off downloads, can people still take the data?**

Turning off downloads for viewers and commenters blocks Google's own download, copy and print options. Google's help page says you can't stop people from sharing the content in other ways.

## Sources

- [Google Docs Editors Help: Protect, hide & edit sheets](https://support.google.com/docs/answer/1218656?hl=en)
- [Google Docs Editors Help: Share files from Google Drive](https://support.google.com/docs/answer/2494822?hl=en)
- [Google Docs Editors Help: Stop, limit, or change sharing](https://support.google.com/docs/answer/2494893?hl=en)
- [Google Workspace Admin Help: Manage external sharing for your organization](https://knowledge.workspace.google.com/admin/drive/manage-external-sharing-for-your-organization?hl=en)
- [Microsoft Support: Protect an Excel file](https://support.microsoft.com/en-us/office/protect-an-excel-file-7359d4ae-7213-4ac2-b058-f75e9311b599)

## How Junify handles this

**Doing this by hand** To keep shared accounts safe, you track who knows each password, and change it and send out the new one whenever someone leaves. You also keep a separate record of who did what under the same login.

**With Junify** When you move a sheet of logins to Junify, change each password first and let only your admin enter the new one. People verify on their own phone before signing in and never see the password. When someone stops using an account, remove their access in Junify instead of changing the password and updating the sheet. Each use is recorded by person.

Junify is an access management service for handing work in your web accounts to employees, contractors and outside teams without giving them the password. Each person verifies on their own phone and clicks a card to sign in. The password is never shown, and Junify records who used which account and when.

- [Try the demo](https://www.junify.com/bpo/try?lang=en&scenario=shared-accounts&from=guide&cluster=shared-accounts&slug=google-sheets-password-protection)
- [Book a 30-minute demo](https://www.junify.com/bpo/demo)

## More on this topic

- [How 1Password and Junify differ for shared accounts](/guides/shared-accounts/1password-and-junify): 1Password fits storing and sharing each employee's own passwords. Junify fits shared accounts people should use without seeing the password. You can run both.
- [How Bitwarden and Junify differ for shared accounts at work](/guides/shared-accounts/bitwarden-and-junify): Bitwarden fits employees who keep their own passwords and share some with trusted coworkers. Junify fits shared accounts used without seeing the password.
- [Should employees save work passwords in the browser?](/guides/shared-accounts/browser-saved-passwords-at-work): Fine for a person's own work login, in a company-managed profile, on a device only they use. Avoid it for shared accounts, personal devices and personal sync.