0

I have created a database with Microsoft Access 2010. I had to create it as an mdb because the database is accessed on PCs where older version of Office is installed. I also password protected it, with Access 2010.

I would need to know what standard of encryption is used in this situation. I used the normal procedure, as you can see in the image linked below:

enter image description here

Ramhound
  • 41,734
  • 35
  • 103
  • 130
Simone
  • 1
  • 1
  • I don't think it is encrypted at all, only compressed. – LPChip Jun 25 '19 at 09:22
  • 1
    @LPChip - The screenshot indicates that Access 2007 will encrypt the file. The author is asking which encryption algorithm Access uses. – Ramhound Jun 25 '19 at 09:24
  • @Ramhound Lets just say that Excel says the same thing. If you rename the excel file to .zip, you can open the excel file, edit a file to remove the password and you unlock the file. To me, that is not encryption, but compression. I'm fairly sure mdb has a similar system. – LPChip Jun 25 '19 at 09:42
  • 1
    @LPChip - An access database is different then Excel. – Ramhound Jun 25 '19 at 09:49

1 Answers1

1

I would need to know what standard of encryption is used in this situation?

The encryption by default is 40-bit RC4. Access also supports 256-bit AES encryption.

If you use the .ACCDB format and change the default encryption, it could be very secure. An article by Wayne Phillips has some good information on how to do that. According to the article, the default encryption is 40-bit RC4, which is not very secure and can be broken quickly.

The default Cryptographic Service Provider is 'Microsoft Base Cryptographic Provider' and this provider allows RC4 with up to 56-bit key length.

Source: Changing the encryption type in Access 2007

Source: How secure is encryption in Access 2007?

You can apparently change the encryption to other options such as 256-bit AES, though. It is currently not considered feasible to be able to break a 256-bit symmetric key by brute force.

While it does appear possible to change the Cryptographic Service Provide, the method used in the relevant article, can no longer used. It certainly is still possible to make the necssary changes yourself. However, I consider "how that is acomplished", to be outside of the scope of this question

Changing the encryption type in Access Part 2

Ramhound
  • 41,734
  • 35
  • 103
  • 130
  • Hello and thank you for the answer. At the moment I have to use the mdb version of file database. As far as I understand the encryption is 40-bit RC4 for any MDB files, even if I used Access 2010 to encrypt it, and if I would want more protection I have to convert to a accdb or lccdb file. – Simone Jun 25 '19 at 12:20