[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2216
  • Last Modified:

Securing an Excel XLSM file

A friend has spent quite a lot of money developing a complex, interactive report based on data downloaded into Excel that will be sold to his clients. We would like to lock down or encrypt the XLSM file so that competitors cannot access the IP but user clients can still manipulate the cube data.

A google search for “secure Excel spreadsheet” brought up products such as DoneEx XCell Compiler (www.doneex.com), Mirage All-In-One Protector (www.mirage-systems.de/landing/all-in-one-protector-lp-en.html), Spreadsheet Sentry (www.spreadsheetsentry.com), XLSafe CORE & VBASafe from DataSafeXL (www.datasafexl.com), XLS Padlock (www.xlspadlock.com), & LockXLS (www.lockxls.com) on the first couple of pages.

Has anyone here had experience with any such products?

If so, can you please tell me your favourite and why you chose it? Points will be split amongst all those who answer those two questions

Thanks very much,

John
0
243johnm
Asked:
243johnm
  • 3
  • 3
1 Solution
 
243johnmAuthor Commented:
Thanks aikimark, but I don't understand. I added in Excel as a topic, but there isn't much in Help about Zones (http://support.experts-exchange.com/customer/portal/articles/search?q=zones&b_id=44) except an article about Topic Advisors (http://support.experts-exchange.com/customer/portal/articles/1092428-who-are-the-topic-advisors-?b_id=44)...

John
0
 
ProfessorJimJamCommented:
John,

there are different ways of protecting the VBA code.

i will try to explain it in details. I develop Excel Add-Ins and it was so easy for hackers to steal my work by cracking the VBA protection and unveiling the full code.  i was so disappointed with where i found my work that took months to complete was unfolded in net and i could not do anything about it, but put more security in my Add-Ins.

as you already know, that VBA built-in protection is for no use at all. it can easy be broken,  
another option is blocking the VBA to "project is unviewable" which is done two ways,  by Sharing the workbook in SHared status and then changing it to an Add-In,  this is also not well protected, because some commercial software break this protection too. another option that protects in similar way "project is unviewable"  is by commercial softwares and similarly if it can be protected by commercial software, then it can be broken with similar commerial softwares.

my personal view, the websites you referred, i have used as trial some of them, but again VBA code is still vulnerable.
so, that leaves the followings options.  

using the VBA Obfuscation makes it most likely useless code, if revealed by hackers, however if the activation module of code is not protected by using many shadower lines VBA then even VBA Obfuscation sometimes can be hacked with very advanced hackers. even if they reveal the code, the only benifit they can get is to make the add-in work, however the use of codes will be useless for them, as the Obfuscation cannot be decoded easily. i suggest you read this article here http://www.spreadsheet1.com/excel-vba-code-obfuscation.html    Some of my friends they used this method and they are happy with it.

another option which is a bit advanced for developer, creating COMM Add-ins using VB6  VSTO and compiling your codes in DLL files, which, i personally believe is more protected. to see more details on this option i suggest you read http://www.cpearson.com/excel/creatingcomaddin.aspx

another recent post by Spreadsheet1 website,  they are working to complete the full features Secure ++ Delphi Application for securing your VBA in DLL files. it is in beta version for now, i suggest you read http://www.spreadsheet1.com/secure-vba-compiler-for-microsoft-office-excel.html


finally, i have seen some smart developers used the services of http://www.lockxls.com/product.asp 
i personally, did not use, so i cannot have more say about lockxls  , however you might wanna explore the options.


hope it helps.
0
 
243johnmAuthor Commented:
Thanks ProfJimJam, much appreciated! Your previous situation is exactly what we are trying to avoid...

As mentioned in my original post, I will wait a while and see if I get multiple suggestions before closing and awarding points. But yours is certainly an excellent start!

Thanks again,

John
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
aikimarkCommented:
@ProfessorJimJam

That was a great comment.  I've bookmarked it and am going to share it with my Microsoft Office User Group.  This month, we presented a "protecting your Access database".  I think a protecting your VBA code (in non-Access applications) presentation is in order.
0
 
ProfessorJimJamCommented:
@aikimark

Thank you.
0
 
243johnmAuthor Commented:
Thanks very much @ProfessorJimJam, your very complete response is much appreciated, A+!

John
0
 
ProfessorJimJamCommented:
You are most welcome.

thanks for the feedback.
0

Featured Post

Learn to develop an Android App

Want to increase your earning potential in 2018? Pad your resume with app building experience. Learn how with this hands-on course.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now