XLS Padlock Changelog

The XLS Padlock changelog offers a detailed, chronological history of all published versions. Each entry lists new features, enhancements, bug fixes, and other significant changes. The most recent version is always at the top.

Released June 11, 2026. This major release modernizes XLS Padlock’s internal engines, hardens protected workbooks against new Microsoft 365 cloud surfaces and other plugins for Excel like Claude for Excel, and offers several new features and speed improvements.

• New New Multilingual Engine (GNU gettext): XLS Padlock and the protected applications now use the industry-standard gettext format (.po / .mo) for all 10 supported languages (English, French, Spanish, Portuguese, Dutch, German, Arabic, Italian, Simplified Chinese, Traditional Chinese), with correct right-to-left mirroring for Arabic.
• New End-User Translation Override: You can choose a single .po file to translate the protected application’s interface. XLS Padlock compiles it natively into the protected application, with no external tools required for your customers.
• New New In-House VBA Engine: A new VBA engine replaces the previous third-party scripter. It produces universal bytecode that runs unchanged in both 32-bit and 64-bit protected workbooks (a single compilation pass instead of separate 32-bit and 64-bit compilers), with faster startup and a smaller runtime.
• New Run as a VBA-Only App (Excel Window Fully Hidden): A new option on the Splash Screen page lets your application run entirely from your VBA UserForms, with the Excel main window and its taskbar icon never appearing at any point. Excel is hidden from the very start of launch, so there is no flash and no Excel splash before your first form is shown. It combines naturally with the splash screen and the option to hide the loading dialog for a fully silent, fully branded startup.
• New Microsoft 365 Cloud and AI Lockdown: Protected workbooks now block, by default, the Microsoft 365 cloud and AI surfaces that can read or send out workbook data: Office JS web add-ins (for example the Claude for Excel plugin and other third-party JS add-ins), Office Scripts and Power Automate, and Microsoft connected experiences such as Copilot, Python in Excel, Smart Lookup, and Translator. The matching ribbon entry points (the Home tab Add-ins flyout, the Automate tab, and the Copilot button) are hidden as well. Each capability stays off unless you enable it, only for what your customers genuinely need, from the new Cloud & AI options page.
• New Stronger Save-File Encryption: XLSC and XLSCE save files now use AES-256-CTR encryption with HKDF-SHA256 key derivation and HMAC-SHA256 authentication, replacing the legacy scheme. Save files written by older versions keep opening unchanged.
• New Signed Online Activation Responses (Optional): A new opt-in upgrade has the protected application cryptographically verify the activation server’s response with an Ed25519 signature before trusting any field, including the status and error messages shown to the end user. This protects against tampering on the network path even over HTTPS (for example, a proxy or security product that injects its own trusted root). A compatibility option, checked by default, preserves the previous behavior; enabling the new mode requires the 2026 version of your activation kit (Activation Kit, WooCommerce Integration Kit, or FastSpring Subscription Kit), which serves both old and new protected applications from the same install.
• New Enhanced Hardware Fingerprint (Optional): A new option on the Hardware ID Options dialog reinforces the System ID computation. The System ID format is unchanged (XXXX-XXXX-XXXX). It is on by default for new projects and off for projects created with earlier versions, since enabling it rotates the System ID and invalidates previously issued activation keys.
• New Launcher Welcome Screen and Version Check: The application launcher now shows a welcome dialog at startup and clearly rejects bundles produced by versions older than 2026, instead of failing with a cryptic error.
• Improved Hardened Application Startup: The protected application’s startup loader has been hardened against local tampering, DLL search-order hijacking, and symbolic-link or junction redirection, and it now verifies that its runtime components are signed by G.D.G. Software before loading them. Modern exploit mitigations (Control Flow Guard and CET shadow stack) are enabled.
• Improved Locale-Aware Cell Value Restoration: When restoring cell values from a XLSCE save file, numbers are now interpreted using Excel’s interface language rather than the Windows regional settings, fixing cases where values could be restored as text and break dependent formulas.
• Improved Reliable Startup on Deeply Nested Profiles: Fixed silent startup failures on corporate or domain-joined profiles whose AppData path exceeds the historical 260-character limit.
• Fixed Python in Excel Workbooks: Packing a workbook that contains Python in Excel (=PY()) cells used to silently drop the Python content, leaving a protected workbook that Excel refused to open. XLS Padlock now detects this at the start of compilation and offers to enable the option that preserves Python content (formula protection through Excel Automation).
• Fixed Azure Artifact Signing Detection: The Code Signing page now refreshes its SignTool extension status as soon as you close Global Preferences, and Auto-detect no longer overwrites a valid custom path with a non-existent suggestion. It also probes the current Azure Artifact Signing per-user install location.
• Fixed Deactivation and Relaunch from VBA on 64-bit Excel: Calling the deactivation or relaunch helpers from VBA could silently fail for workbooks distributed in the bundle format and opened under 64-bit Excel. This now works correctly.
• Fixed Save Mode Migration: Switching between Full Save (XLSC) and Cell Values (XLSCE) modes between two releases no longer traps users who have existing save files in a loop of “not compatible” messages; the original embedded workbook now loads automatically.
• Fixed Cell Values Recalculation: Formulas that depend on values restored from a XLSCE save file now recalculate automatically on opening, instead of showing stale values until F9 was pressed.
• Fixed Cell Values Save Files Open Correctly: Fixed cases where XLSCE save files could report “corrupted” even when intact, by always selecting the correct decryption algorithm recorded in the save file.
• Fixed Atomic Save Operations: Excel “Replace” and “Move” save operations now round-trip content correctly, fixing cases where external tools (anti-virus scanners, OneDrive or SharePoint sync clients) could index or sync empty files.
• Fixed Compatibility with Older 32-bit Add-ins: Third-party add-ins that open workbook paths through the older ANSI file API no longer crash on protected workbooks.
• Removed Pre-2026 application files are not compatible: Protected applications and .xplapp bundles produced by XLS Padlock 2026.0 require a 2026.0 or newer runtime, and files produced by older versions are rejected by the new launcher. Re-pack any workbook you want to distribute with this release.
• Removed VBA named constants from the previous scripter: VBA scripts that relied on named constants such as xlAll, xlAutomatic, or xlByRows must now use their literal numeric values or rely on the late-bound Application object (which still resolves Excel enums automatically). This follows the move to the new in-house VBA engine.
• Removed Legacy .sil translation format: Custom translations now use the gettext .po / .mo format. The previous .sil format is no longer used at runtime.

This version introduces compatibility with the latest Windows 11 update, resolves critical issues with the Web Update and Save As features, and includes several internal component updates for enhanced performance and security.

• New Windows 11 25H2 Compatibility: Full support and testing for the Windows 11 Version 25H2 update.
• New New Languages: Added full localization for Italian, Simplified Chinese, and Traditional Chinese.
• Improved Upgraded key internal components for improved performance, stability, and security.
• Improved Web Update Improvements: The web update has been improved, particularly with Universal EXE files.
• Improved Runtime File Cleanup: Old runtime DLLs are now removed from the AppData location.
• Improved Revamped Documentation: The entire documentation has been overhauled. It is still available online, as an offline help file, and as a downloadable PDF guide.
• Improved Internal update for Enky CT and LC dongles.
• Improved Minor improvements.
• Fixed Save As Dialog Path: Fixed a regression where the “Save As” dialog would incorrectly default to a previously used directory, ignoring the path optionally specified via the SetSecureWorkbookFilename VBA function.
• Fixed EXE Version Info: Fixed a bug where the CompanyName and InternalName fields in the EXE’s version information were not being set correctly during compilation.

This release focuses on performance improvements, new language support, and fixing several user-reported bugs for better stability and user experience.

• New New Languages: Added Simplified Chinese and Traditional Chinese localization files (.SIL) for compiled applications.
• New Improved Compression: The compression algorithm has been switched to Zstandard for faster compilation and execution.
• Improved Component Update: The internal spreadsheet engine has been updated for improved compatibility and performance.
• Improved The compilation process will now correctly stop if an error (such as an incorrect password) occurs while protecting the original workbook, preventing the creation of a non-functional application.
• Improved Added a check at compile time to prevent the use of duplicate companion file names.
• Improved Stability: The multithreading loop has been optimized for increased overall application stability.
• Improved Improved progress bar behavior during compression.
• Fixed Fixed a regression where a protected workbook could no longer be opened directly from Windows Explorer (via double-click or file association) in some cases.
• Fixed Resolved a conflict where the deactivation prompt could not appear when the “Save changes automatically” option was enabled.
• Fixed Fixed a focus-stealing issue where the application would switch to another window after saving a file.
• Fixed The PE (Portable Executable) checksum calculation has been fixed.
• Fixed Fixed an issue that could prevent the correct EXE format from being selected when creating a new project.

This is a landmark update packed with significant new capabilities, security enhancements, and a refined user experience to provide greater flexibility and protection for your Excel applications.

• New Comprehensive Multilingual Support:
  • The main XLS Padlock interface is now multilingual. It auto-detects your Windows display language or can be set manually.
  • Compiled applications now support multilingual user interfaces (dialogs, messages).
  • Current languages include: English, French, Spanish, Portuguese, Dutch, German, and Arabic (with RTL support).
• New New Standalone Package Format: A new standalone executable format using robust 7z compression. This results in smaller .exe files and significantly reduces antivirus false positives compared to the previous UPX-based method.
• New Enhanced Cloud Code Signing Support:
  • Added support for modern, cloud-based code signing certificates.
  • Includes built-in integration for Microsoft Azure Trusted Signing.
  • Integrates with Microsoft’s SignTool.exe, allowing the use of certificates stored on hardware tokens or in the cloud.
• Improved Modernized UI: The XLS Padlock interface has been given a fresh look, and UI control resizing issues have been resolved.
• Improved Updated Help System: Documentation is now delivered in a modern help viewer, and the context-sensitive help (F1 key) has been improved.
• Improved Simplified Bundle App Format: The 64-bit loader is now a distinct, digitally signed .bin64 file for improved recognition by security software.
• Improved Upgraded Signature Security: Dropped support for outdated SHA-1 signatures. XLS Padlock now relies exclusively on SHA-256 signatures as per Microsoft guidelines.
• Improved Improved OneDrive Handling: The software now provides clearer warnings when working with cloud-only OneDrive files.
• Improved Smoother Web Updates: Fixed the application restart logic after a web update when the “Allow one instance” option is active.
• Improved Refined Localization: Addressed untranslated text elements and improved overall language file handling.
• Fixed Fixed issues related to sheet protection.
• Fixed Fixed bugs affecting interaction with locked cells.
• Fixed Resolved an issue related to certificate deactivation.
• Fixed Fixed problems with the creation of universal icons for applications.
• Fixed General stability improvements and various other minor fixes.
• Removed Support for EnkySL dongles has been discontinued.
• Removed UPX compression is no longer used for creating executables.
• Removed Support for SHA-1 code signing has been removed.