

Just more for you to keep in mind in regards to this. With this comes two questions for you OP, and you don't need to answer here. An 8 character password is a lot easier to crack than a 12 character or 20 character. Also on this, length of the password comes in handy as well. How long is the time period that the data within is considered sensitive information? How strong is the password you have made, and with that, will it survive against a dictionary attack? With this, include both lower and upper case along with numbers and special characters. If someone intercepts that excel sheet, given enough time, they will be able to crack it and access the data inside of it. With that said, a password protected, encrypted excel sheet does not have any protection to stop a brute force attack. These actions deter brute force attempts. Also why some websites make it so you have to wait so long before you can try again. This is why AD logins are normally limited to 3 attempts before locking up. The issue with brute force attacks is given enough time, and the ability to keep trying, anything can be brute forced and taken.
