Copilot in Excel Cannot Handle Encrypted Workbooks: Workaround

Copilot in Excel helps you analyze data, generate formulas, and create charts using natural language prompts. However, Copilot cannot read or process any data from encrypted workbooks. When you open a password-protected or encrypted Excel file, Copilot remains inactive and shows an error message in the Copilot pane. This limitation is by design to protect the encryption boundary of your data. This article explains why encrypted workbooks block Copilot and provides the only workaround that lets you use Copilot with the data from those files.

Why Copilot Cannot Read Encrypted Excel Workbooks

Microsoft designed Copilot to operate within the Microsoft 365 compliance boundary. Encrypted workbooks use a separate encryption layer that Copilot does not have permission to decrypt. The Copilot service cannot bypass workbook-level encryption because doing so would violate the file’s security intent. When you apply encryption through Excel’s built-in tools, the file becomes opaque to all Microsoft 365 services that rely on reading the file content, including Copilot.

Encryption Methods That Block Copilot

The following encryption methods cause Copilot to fail:

• Password to Open: Set via File > Info > Protect Workbook > Encrypt with Password. This applies AES-256 encryption to the workbook.
• Information Rights Management (IRM): Applied via File > Info > Protect Workbook > Restrict Access. IRM encrypts the file and restricts permissions to specific users.
• Microsoft Purview Data Loss Prevention (DLP): When an admin configures a DLP policy that encrypts Excel files automatically, Copilot cannot read them.

In all three cases, Copilot shows the message “Copilot cannot work with encrypted workbooks” in the Copilot pane. The Copilot icon in the ribbon remains grayed out.

Workaround: Create an Unencrypted Copy of the Workbook

The only supported workaround is to save a decrypted copy of the workbook in a secure location. Copilot can then read the data from that copy. Follow these steps precisely. Do not skip any step because leaving encryption partially intact will still block Copilot.

1. Open the encrypted workbook in Excel
   Launch Excel and open the file. Enter the password when prompted. The workbook opens with full access to its content.
2. Save a decrypted copy
   Go to File > Save As. Choose a location that is not the original folder. In the Save As dialog, click Tools (next to the Save button) and select General Options. Clear the “Password to open” field completely. Leave the field blank. Click OK.
3. Remove IRM restrictions if present
   If the original workbook had IRM applied, go to File > Info > Protect Workbook > Restrict Access. Select “Unrestricted Access.” If the option is grayed out, you must be the original author or have Full Control permissions. If you cannot remove IRM, you cannot create a usable copy.
4. Name the decrypted copy clearly
   Use a filename that distinguishes it from the encrypted original, for example “SalesData-Decrypted.xlsx.” This prevents confusion when you work with both files.
5. Open the decrypted copy in Excel
   Close the encrypted workbook. Open the decrypted copy. Verify that the Copilot icon in the ribbon is active. Type a test prompt, such as “Summarize this data in a table.” Copilot should respond immediately.

If DLP Policies Prevent Removing Encryption

When your organization uses Microsoft Purview DLP, you may not be able to save an unencrypted copy. The DLP policy automatically encrypts files that contain sensitive data. In this case:

1. Contact your Microsoft 365 admin
   Explain that you need an unencrypted copy of a specific workbook to use Copilot. The admin can create a DLP exception for that file or for a specific SharePoint site.
2. Request a shared location with encryption disabled
   Ask the admin to configure a SharePoint document library or OneDrive folder where DLP encryption is not applied. Save the decrypted copy there.

If Copilot Still Does Not Work After Removing Encryption

Copilot Cannot See the Decrypted Copy

If Copilot still shows the encryption error after you save the decrypted copy, check these items:

• File location: Copilot can only read files stored on OneDrive, SharePoint, or in the local Excel app. Files stored on network drives or external drives are not accessible. Move the decrypted copy to OneDrive or SharePoint.
• File format: Copilot supports .xlsx files only. If the original file was .xls, .xlsm, or .xlsb, the decrypted copy must be saved as .xlsx.
• Copilot license: Verify that you have an active Copilot for Microsoft 365 license. Go to File > Account. Check the subscription details under “Copilot.”

Copilot Returns Generic Output Instead of Workbook-Specific Data

This occurs when the decrypted copy contains no data or contains only blank cells. Confirm that the decrypted copy has the same data as the encrypted original. Use the “Compare Files” feature in Excel to check for differences: go to Home > Find & Select > Select Objects. Then open both files side by side and visually compare the data.

Encrypted Links or References Block Copilot

If the decrypted copy contains external references to encrypted workbooks, Copilot may still fail. Go to Data > Edit Links. If any linked workbook is encrypted, break the link by selecting the link and clicking Break Link. Save the decrypted copy again.

Copilot with Encrypted Workbooks vs Copilot with Unencrypted Workbooks

Item	Encrypted Workbook	Unencrypted Workbook
Copilot activation	Copilot icon is grayed out	Copilot icon is active
Data access	Copilot cannot read any data	Copilot reads all data in the workbook
Error message	“Copilot cannot work with encrypted workbooks”	No error
Workaround	Create a decrypted copy	None needed
Security risk	None — encryption remains on original	Data is not encrypted at file level

The table shows that the only trade-off is security. You must decide whether the convenience of Copilot outweighs the need for file-level encryption. For sensitive data, keep the encrypted original and use the decrypted copy only for analysis sessions. Delete the decrypted copy when you finish.

You can now create a decrypted copy of any encrypted Excel workbook and use Copilot to analyze its data. The key step is clearing the password and IRM settings in the Save As dialog. For DLP-encrypted files, work with your admin to create an exception. After you finish your Copilot session, delete the decrypted copy to maintain data security. If you need to work with the same data regularly, consider using Excel’s “Always Open Read-Only” feature instead of encryption, which allows Copilot to read the file while still preventing accidental edits.