Safely opening documents with macros (XLSM, DOCM, PPTM)
The risks of macro-enabled documents, and how to view and edit their content without running the macros.
If a file name ends in .xlsm, .docm or .pptm, it may contain VBA macros. Macros are used to automate work, but in a document from an unknown source they can also be a way to run malware.
DocDori doesn’t run macros
- Opening a document does not run macros, scripts or external links. Only the content is read.
- XLSM: edit values and supported formulas, then save as an XLSX with the macros removed.
- DOCM: edit the body, then save as a DOCX with the macros removed.
- PPTM: edit the slide text, then save as a PPTX with the macros and linked parts removed.
Before you download a conversion that removes macros, DocDori explains it and asks for your consent. The original file stays as it is.
Checklist when you receive a macro document
- Make sure you know who sent it and why.
- Be especially suspicious of documents that ask you to click the ‘Enable Content’ button in Office.
- If you only need to see the content, check it first in a viewer that doesn’t run macros.
- If it’s a work file that truly needs macros, run them only from a trusted location in line with your company’s security policy.
When this comes in handy
- When you just want to check the numbers in an XLSM quote from an uncertain source
- When you don’t need the macros and only have to fix the table contents before passing the file on
- When your company’s security policy won’t let you open macro documents in Office
Frequently asked questions
The buttons don’t work in the file with macros removed. Buttons and automatic calculations built with macros stop working once the macros are removed. Expect only the values, regular formulas and document body to remain.
Is it safe to open in DocDori? DocDori reads only the content without running macros, scripts or external links. That doesn’t make the file itself harmless, though, so don’t open an original file from an unknown source in Office.