Fix Word Editing Protection Removed Without Password in SharePoint
Question details
Users experience a security vulnerability where Word document editing protection can be disabled without entering a password when multiple people co-author the document in SharePoint.

- Product
- Microsoft Word, SharePoint
- Device & OS
- not provided
- Scenario
- Co-authoring a password-protected, restricted Word document stored in a shared SharePoint library.
- Observed behavior
- When the first user attempts to stop protection, they are prompted for a password. However, if subsequent users open the same document simultaneously in the Word desktop app, they can remove the protection without being asked for a password.
Verify your current Microsoft 365 build and SharePoint environment details, as this is a known behavior related to the Word desktop app's co-authoring feature.
Use SharePoint Permissions and Disable Co-authoring
Since this is a known bug during simultaneous editing, secure your documents using SharePoint's folder-level permissions and require check-outs to prevent co-authoring conflicts.
This issue is a documented bug when using the Word desktop app with the co-authoring feature. When multiple users access the restricted document simultaneously from SharePoint, the restriction enforcement fails to prompt secondary users for the password.
Until Microsoft patches this vulnerability, you should avoid relying solely on Word's built-in 'Restrict Editing' feature for highly sensitive files in a shared environment.
Navigate to your SharePoint library, select the document or folder, click 'Manage Access', and change the permission level of the users or groups from 'Can edit' to 'Can view'.
Go to the SharePoint Library Settings > Versioning settings, and toggle 'Require Check Out' to 'Yes'. This forces users to check out the document before editing, effectively disabling simultaneous co-authoring and preventing the protection bypass bug.
Submit a detailed bug report to the Microsoft Word feedback portal. Include your Microsoft 365 build version, SharePoint environment details, and the steps to reproduce the issue so the product team can investigate.
Try WPS Office for Secure and Stable Document Management
If you are frustrated by Word and SharePoint syncing bugs or protection vulnerabilities during co-authoring, WPS Office provides a highly compatible, secure alternative. Enjoy familiar document editing with reliable file encryption features without the high subscription costs.
- 1. Download and Install: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Open Your Documents: Launch WPS Writer and open your existing Word (.docx) files directly without losing any formatting.
- 3. Apply Reliable Protection: Navigate to the Review tab and use the Encrypt feature to safely password-protect and restrict edits on your files.

Frequently Asked Questions
Why does Stop Protection work without a password for secondary users?
This occurs due to a bug in Microsoft Word's co-authoring synchronization. When multiple users open a password-protected document from SharePoint simultaneously in the desktop app, the restriction enforcement mechanism fails to prompt subsequent users for the password.
Can I prevent this issue by opening the file in Word Online?
Word Online (the web app) often prevents editing entirely for documents with strict formatting or tracked-changes restrictions, forcing users to open them in the desktop app where the co-authoring vulnerability currently exists.
How do I properly secure a Word document in SharePoint?
The most secure method is to manage access via SharePoint's native permissions. Assign users 'Read' access instead of 'Edit' access at the library or file level to strictly enforce who can modify the document content, regardless of Word's internal password settings.




