Solved

Securing an Excel XLSM file

Posted on 2015-01-22
8
1,374 Views
Last Modified: 2015-01-26
A friend has spent quite a lot of money developing a complex, interactive report based on data downloaded into Excel that will be sold to his clients. We would like to lock down or encrypt the XLSM file so that competitors cannot access the IP but user clients can still manipulate the cube data.

A google search for “secure Excel spreadsheet” brought up products such as DoneEx XCell Compiler (www.doneex.com), Mirage All-In-One Protector (www.mirage-systems.de/landing/all-in-one-protector-lp-en.html), Spreadsheet Sentry (www.spreadsheetsentry.com), XLSafe CORE & VBASafe from DataSafeXL (www.datasafexl.com), XLS Padlock (www.xlspadlock.com), & LockXLS (www.lockxls.com) on the first couple of pages.

Has anyone here had experience with any such products?

If so, can you please tell me your favourite and why you chose it? Points will be split amongst all those who answer those two questions

Thanks very much,

John
0
Comment
Question by:243johnm
  • 3
  • 3
8 Comments
 
LVL 1

Author Comment

by:243johnm
ID: 40566207
Thanks aikimark, but I don't understand. I added in Excel as a topic, but there isn't much in Help about Zones (http://support.experts-exchange.com/customer/portal/articles/search?q=zones&b_id=44) except an article about Topic Advisors (http://support.experts-exchange.com/customer/portal/articles/1092428-who-are-the-topic-advisors-?b_id=44)...

John
0
 
LVL 25

Accepted Solution

by:
ProfessorJimJam earned 500 total points
ID: 40566305
John,

there are different ways of protecting the VBA code.

i will try to explain it in details. I develop Excel Add-Ins and it was so easy for hackers to steal my work by cracking the VBA protection and unveiling the full code.  i was so disappointed with where i found my work that took months to complete was unfolded in net and i could not do anything about it, but put more security in my Add-Ins.

as you already know, that VBA built-in protection is for no use at all. it can easy be broken,  
another option is blocking the VBA to "project is unviewable" which is done two ways,  by Sharing the workbook in SHared status and then changing it to an Add-In,  this is also not well protected, because some commercial software break this protection too. another option that protects in similar way "project is unviewable"  is by commercial softwares and similarly if it can be protected by commercial software, then it can be broken with similar commerial softwares.

my personal view, the websites you referred, i have used as trial some of them, but again VBA code is still vulnerable.
so, that leaves the followings options.  

using the VBA Obfuscation makes it most likely useless code, if revealed by hackers, however if the activation module of code is not protected by using many shadower lines VBA then even VBA Obfuscation sometimes can be hacked with very advanced hackers. even if they reveal the code, the only benifit they can get is to make the add-in work, however the use of codes will be useless for them, as the Obfuscation cannot be decoded easily. i suggest you read this article here http://www.spreadsheet1.com/excel-vba-code-obfuscation.html    Some of my friends they used this method and they are happy with it.

another option which is a bit advanced for developer, creating COMM Add-ins using VB6  VSTO and compiling your codes in DLL files, which, i personally believe is more protected. to see more details on this option i suggest you read http://www.cpearson.com/excel/creatingcomaddin.aspx

another recent post by Spreadsheet1 website,  they are working to complete the full features Secure ++ Delphi Application for securing your VBA in DLL files. it is in beta version for now, i suggest you read http://www.spreadsheet1.com/secure-vba-compiler-for-microsoft-office-excel.html


finally, i have seen some smart developers used the services of http://www.lockxls.com/product.asp 
i personally, did not use, so i cannot have more say about lockxls  , however you might wanna explore the options.


hope it helps.
0
 
LVL 1

Author Comment

by:243johnm
ID: 40566351
Thanks ProfJimJam, much appreciated! Your previous situation is exactly what we are trying to avoid...

As mentioned in my original post, I will wait a while and see if I get multiple suggestions before closing and awarding points. But yours is certainly an excellent start!

Thanks again,

John
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 45

Expert Comment

by:aikimark
ID: 40566459
@ProfessorJimJam

That was a great comment.  I've bookmarked it and am going to share it with my Microsoft Office User Group.  This month, we presented a "protecting your Access database".  I think a protecting your VBA code (in non-Access applications) presentation is in order.
0
 
LVL 25

Expert Comment

by:ProfessorJimJam
ID: 40566627
@aikimark

Thank you.
0
 
LVL 1

Author Closing Comment

by:243johnm
ID: 40570161
Thanks very much @ProfessorJimJam, your very complete response is much appreciated, A+!

John
0
 
LVL 25

Expert Comment

by:ProfessorJimJam
ID: 40570231
You are most welcome.

thanks for the feedback.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction While answering a recent question (http:/Q_27311462.html), I created an alternative function to the Excel Concatenate() function that you might find useful.  I tested several solutions and share the results in this article as well as t…
Improved? Move/Copy Add-in Replacement - How to avoid the annoying, “A formula or sheet you want to move or copy contains the name XXX, which already exists on the destination worksheet.” David Miller (dlmille)  It was one of those days… I wa…
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.
This Micro Tutorial will demonstrate in Microsoft Excel how to add style and sexy appeal to horizontal bar charts.

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question