Data security and Python in Excel

How does Python in Excel handle workbooks from the internet or untrusted sources? 

Python in Excel follows the same security policies as Excel when it comes to opening workbooks from the internet or untrusted sources. 

If you open a workbook that contains Python code from the internet, Excel Protected View won’t run Python formulas in the workbook. If a workbook is opened with Microsoft Defender Application Guard, Python formulas don’t run by default.

In addition, Python in Excel runs the Python formulas in the untrusted workbook within its own dedicated hypervisor isolated container, helping prevent potential interaction or interference with other Python code running from other open workbooks. 

How often does Microsoft update the containers that the Python code runs on? 

Python in Excel uses containers to run Python code on Azure. Containers are isolated and secure environments that can run applications and services without affecting the rest of the system. To help ensure the security and reliability of the containers, regular updates and patches are applied to them.

Python and the libraries are updated in the following ways to help keep your data secure and your numerical results consistent.

Patches are applied to the underlying operating system that the Azure Container Instance runs on. This helps ensure the container is protected from vulnerabilities and exploits that may affect your data. This is done automatically with no input required from you.

Once Python in Excel becomes generally available, periodic updates of the Python environment will be released, with Python and the libraries provided by Anaconda. These versions include the latest security fixes and enhancements from the Python and Anaconda communities. These releases will be announced through blog posts and documentation. This will be done automatically with no setup required, and Microsoft will default to the latest environment. Existing workbooks will still calculate against the version of the environments the workbook was created on, and users will be prompted to upgrade if there is a newer version. This approach helps ensure that your numerical results stay consistent and allows you and your organization to stay up to date.

How does Microsoft respect your data and privacy?

Your privacy is important to Microsoft. See the Microsoft privacy statement for more details. 

To review the data protection policies of Microsoft 365 connected experiences, see Connected experiences in Microsoft 365. 

To review the data protection policies when using Copilot with workbook data, see Data, Privacy, and Security for Microsoft 365 Copilot.

To understand how data sent from your workbook to the container is processed, see Required service data for Office.

Update the registry to toggle security warnings for Python in Excel 

The following commands show how to update the registry to change security warning settings for Python in Excel. Run the commands from an elevated command prompt on a Windows device. 

1. Use this command to disable all security warnings. This is the default setting for Python in Excel.
   
   reg add HKCU\software\policies\microsoft\office\16.0\excel\security /v PythonFunctionWarnings /t REG_DWORD /d 0 /f 

2. Use this command to enable a security prompt when opening a workbook that contains a Python formula. It enables a Security Warning notice in the Excel business bar.
   
   reg add HKCU\software\policies\microsoft\office\16.0\excel\security /v PythonFunctionWarnings /t REG_DWORD /d 1 /f 

3. Use this command to disable all Python functions from running. Python functions will return the error #BLOCKED!.
   
   reg add HKCU\software\policies\microsoft\office\16.0\excel\security /v PythonFunctionWarnings /t REG_DWORD /d 2 /f

Microsoft will continue to monitor and adjust Python in Excel to keep you and your data safe. This may involve future changes to the user experience and registry settings.

To stay up to date and see the reports of security vulnerabilities affecting Microsoft’s products and services, see the Microsoft Security Response Center Update Guide.