Why does this happen?

  • The sender encrypted it automatically. Banks, insurers and payroll systems encrypt statements as a matter of policy, usually with your date of birth, postcode or the last digits of an account number.
  • A document system applied a policy. Corporate document management and e-filing systems often add protection on export, without telling the person who exported the file.
  • It is a permissions password, not an open password. If the file opens and only printing or copying is blocked, nobody needs to know a password: the restriction is a flag inside a readable file.
  • It was made from a template that carried protection. Protection set in an original spreadsheet or document can survive export, so a file nobody deliberately locked arrives locked.