Page 1 of 2 12 LastLast
Results 1 to 15 of 24
  1. #1
    4 Star Lounger pccoyle's Avatar
    Join Date
    Apr 2001
    Location
    Auckland, Auckland, New Zealand
    Posts
    535
    Thanks
    3
    Thanked 2 Times in 2 Posts

    Third Party Password Add-in (2000)

    Further to my security and linking post, does anyone know of a third party password add-in (or add-on) for Excel that gets around the klutzy current security model? <img src=/S/cheers.gif border=0 alt=cheers width=30 height=16>
    Paul Coyle
    Approach love and cooking with reckless abandon

  2. #2
    Star Lounger
    Join Date
    Mar 2003
    Location
    Sydney, New South Wales, Australia
    Posts
    54
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Third Party Password Add-in (2000)

    Navigator Utilities at www.robbo.com.au gets around Excels internal security. The Sheet navigator allows you to click on Unprotect for both workbook structures and sheets and remove the password easily
    regards
    mark

  3. #3
    4 Star Lounger pccoyle's Avatar
    Join Date
    Apr 2001
    Location
    Auckland, Auckland, New Zealand
    Posts
    535
    Thanks
    3
    Thanked 2 Times in 2 Posts

    Re: Third Party Password Add-in (2000)

    Interesting site, thanks for the link.
    My quest is for a piece of software that is needed for password entry, so the Excel sheet to be distributed is more secure. I have tools that "break" the sheet and workbook protection passwords in seconds. Therefore If we need to use Excel for distributed workbooks then I need a 'failsafe' way of ensuring that the users cannot get to the hidden sheets. <img src=/S/cheers.gif border=0 alt=cheers width=30 height=16>
    Paul Coyle
    Approach love and cooking with reckless abandon

  4. #4
    Silver Lounger
    Join Date
    Mar 2001
    Location
    Dallas, Texas, USA
    Posts
    1,680
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Third Party Password Add-in (2000)

    Probably not what you're seeking, but...

    If you set a sheets properties to xlveryhidden through the vbe and then apply a 15-digit password to the code, wouldn't that make it impossible to "break". I'm aware of the tools that will bypass workbook and sheet protection, but protection of the vba is much more secure, isn't it?
    - Ricky

  5. #5
    4 Star Lounger pccoyle's Avatar
    Join Date
    Apr 2001
    Location
    Auckland, Auckland, New Zealand
    Posts
    535
    Thanks
    3
    Thanked 2 Times in 2 Posts

    Re: Third Party Password Add-in (2000)

    ..."protection of the vba is much more secure, isn't it?"
    I really don't know. so thanks for your suggestion, I will try this then see what my current cracking tools do in such a case.
    <img src=/S/cheers.gif border=0 alt=cheers width=30 height=16>
    Paul Coyle
    Approach love and cooking with reckless abandon

  6. #6
    Silver Lounger
    Join Date
    Mar 2001
    Location
    Dallas, Texas, USA
    Posts
    1,680
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Third Party Password Add-in (2000)

    This <post#=16588>post 16588</post#> and the posts around it contain some useful information on the vba use of xlveryhidden. Unless, the user can crack the password that protects the vba, a sheet that is veryhidden cannot be unhidden from the Excel menus. Even if the user elects to open the workbook with macros disabled, the sheets remain veryhidden.

    I guess the big question is the security of the vba password. I'd be surprised to discover that it could be cracked. I was able to install a 32-digit password on the project (or code). Add to this the fact that the password is case-sensitive and I think you could wrap it up tighter than drum! A brute-force cracker would take years.
    - Ricky

  7. #7
    4 Star Lounger pccoyle's Avatar
    Join Date
    Apr 2001
    Location
    Auckland, Auckland, New Zealand
    Posts
    535
    Thanks
    3
    Thanked 2 Times in 2 Posts

    Re: Third Party Password Add-in (2000)

    Many thanks Ricky, that link was extrememly useful. <img src=/S/clapping.gif border=0 alt=clapping width=19 height=23>
    With the great info from the Lounge I have some hours of testing the suggestions to establish which is the most suitable. <img src=/S/cheers.gif border=0 alt=cheers width=30 height=16> <img src=/S/flags/NewZealand.gif border=0 alt=NewZealand width=30 height=18>
    Paul Coyle
    Approach love and cooking with reckless abandon

  8. #8
    4 Star Lounger pccoyle's Avatar
    Join Date
    Apr 2001
    Location
    Auckland, Auckland, New Zealand
    Posts
    535
    Thanks
    3
    Thanked 2 Times in 2 Posts

    Re: Third Party Password Add-in (2000)

    A bit of digging around and I came up with this. Discouraging. <img src=/S/bwaaah.gif border=0 alt=bwaaah width=123 height=15>
    If you have a document with password-protected VBA project, but for some reason the password cannot be recovered, or the password shown by AO2000PR cannot be entered (e.g. it contains non-English characters that cannot be entered using your keyboard), or AO2000PR only allows to change or remove that password (but you would not like to do that), you can use the VBA backdoor feature. It works for all applications which can create VBA projects in their documents, not only Microsoft Office (for example, Corel WordPerfect Office).

    With that feature, the password is not being recovered at all. However, you
    Paul Coyle
    Approach love and cooking with reckless abandon

  9. #9
    5 Star Lounger
    Join Date
    Feb 2001
    Location
    Dallas plus 20 miles or so, Texas, USA
    Posts
    876
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Third Party Password Add-in (2000)

    This is just way out there, but worth a shot since it works for me. By the way, the users I support for the most part know very, very little about Excel.

    Anyway, you might think of say in a certain hidden sheet, be it hidden or veryhidden, updating a table from a secure web server, and the contents of that table could be used to make the worksheet or book "run". I use a similar thing with text files, i.e., each book requires three files to run/or return accurate information and the info in each text file must match to a certain extent info contained in the book. Not sure if you can update a table in a veryhidden sheet, but it might allow you to have some sort of control over what takes place.

    Essentially, as a result of evolution and not design, my semi-final (I called it that a year or so ago too!) book/project has turned out to be rather complicated. That complicated-ness makes me think that someone who were to try to piece together and figure out what and when is taking place in my project would be better off starting a new one from scratch. Sometimes, security can be measured in <img src=/S/cheers.gif border=0 alt=cheers width=30 height=16> .

  10. #10
    Super Moderator
    Join Date
    May 2002
    Location
    Canberra, Australian Capital Territory, Australia
    Posts
    5,055
    Thanks
    2
    Thanked 417 Times in 346 Posts

    Re: Third Party Password Add-in (2000)

    Hi Paul,

    Check out the attached. With this one, even finding out the VBA password won't do most Excel hackers much good - as soon as the workbook's VBA project is unprotected, the workbook closes (Hint: VBA password is 'x'). That may be enough to foil even those who've got access to the commercial programs.

    The worksheet password is entirely random and, even if it's broken, is re-established in under 1 second unless you stop the macro (Hint: stopclock).

    Cheers
    Attached Files Attached Files
    Cheers,

    Paul Edstein
    [MS MVP - Word]

  11. #11
    5 Star Lounger
    Join Date
    Dec 2000
    Location
    Reading/Swindon, Berkshire, United Kingdom
    Posts
    664
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Third Party Password Add-in (2000)

    very neat. can I steal your code? (that second line in sub updateprotect provides a backdoor in without calling stopclock, btw <img src=/S/evilgrin.gif border=0 alt=evilgrin width=15 height=15> )

  12. #12
    4 Star Lounger pccoyle's Avatar
    Join Date
    Apr 2001
    Location
    Auckland, Auckland, New Zealand
    Posts
    535
    Thanks
    3
    Thanked 2 Times in 2 Posts

    Re: Third Party Password Add-in (2000)

    Wow, thanks again Macropod, will check this out. <img src=/S/cheers.gif border=0 alt=cheers width=30 height=16> <img src=/S/clever.gif border=0 alt=clever width=15 height=15>
    Paul Coyle
    Approach love and cooking with reckless abandon

  13. #13
    4 Star Lounger pccoyle's Avatar
    Join Date
    Apr 2001
    Location
    Auckland, Auckland, New Zealand
    Posts
    535
    Thanks
    3
    Thanked 2 Times in 2 Posts

    Re: Third Party Password Add-in (2000)

    Hi Mike, thanks for that suggestion. As we have a small "brochure ware" web site http://www.vita.co.nz I had a similar thought as my fourth option to investigate. Went as far as trying to publish a test workbook as HTML, but was given the ....need to install Office Web Components... message. <img src=/S/sigh.gif border=0 alt=sigh width=15 height=15>
    Many thanks for your post, I appreciate your time and will be pursuing the web based idea. <img src=/S/clapping.gif border=0 alt=clapping width=19 height=23> <img src=/S/bravo.gif border=0 alt=bravo width=16 height=30>
    Paul Coyle
    Approach love and cooking with reckless abandon

  14. #14
    Super Moderator
    Join Date
    May 2002
    Location
    Canberra, Australian Capital Territory, Australia
    Posts
    5,055
    Thanks
    2
    Thanked 417 Times in 346 Posts

    Re: Third Party Password Add-in (2000)

    Hi Brooke,

    Rather than have you <img src=/S/pirate.gif border=0 alt=pirate width=22 height=18> my code, how about I just give it to you <img src=/S/wink.gif border=0 alt=wink width=15 height=15> . As for the backdoor, I think that's taken care of in the attached update. Unfortunately, this seems to increase screen flicker in other open workbooks and turning off screen updating doesn't seem to help much <img src=/S/igiveup.gif border=0 alt=igiveup width=31 height=23> .

    Cheers
    Cheers,

    Paul Edstein
    [MS MVP - Word]

  15. #15
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    South Carolina, USA
    Posts
    7,295
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Third Party Password Add-in (2000)

    Is this the code in the WB?

    <pre>Option Explicit
    Dim NextTick
    Dim RandPwd As String
    Dim SavedState As Boolean
    Sub StartClock(Optional Hidden As Boolean = True)
    RandPwd = Int(Rnd * (10 ^ 9))
    ActiveSheet.Protect Password:=RandPwd
    SavedState = True
    ThisWorkbook.Saved = SavedState
    UpdateProtect
    End Sub
    Sub UpdateProtect(Optional Hidden As Boolean = True)
    With ActiveWorkbook
    If ActiveWorkbook.Name = ThisWorkbook.Name Then
    If ThisWorkbook.VBProject.Protection = 0 Then
    ThisWorkbook.Saved = True
    ThisWorkbook.Close
    End If
    If ThisWorkbook.Saved = True Then
    SavedState = True
    Else
    SavedState = False
    End If
    RandPwd = Int(Rnd * (10 ^ 9))
    ActiveSheet.Protect Password:=RandPwd
    ThisWorkbook.Saved = SavedState
    End If
    End With
    NextTick = Now + TimeValue("00:00:01")
    ActiveSheet.Application.OnTime NextTick, "UpdateProtect"
    End Sub
    Sub StopClock(Optional Hidden As Boolean = True)
    On Error Resume Next
    Application.OnTime NextTick, "UpdateProtect", , False
    End Sub
    </pre>



    It took about 3 minutes to get into the module!
    Legare Coleman

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •