Why Office blocks macros, and why you should leave it that way

What macros are

A macro is a small program saved inside a Word, Excel or PowerPoint file. Businesses use them to automate repetitive tasks, such as formatting reports or pulling data together.

Because a macro is a program, it can do almost anything the person opening the file can do, including downloading and running malware. For years, attackers sent invoices, delivery notes and résumés with macros inside, and a line of text telling the reader to click Enable Content to view it.

What Microsoft changed

In 2022, Microsoft began blocking macros by default in Office files that came from the internet, including email attachments. Instead of an Enable Content button, people see a red security banner and the macro does not run.

What to do

• Do not try to get around the block on a file you received by email or downloaded. A real invoice or résumé does not need macros to be read.
• If a document tells you to enable macros or content, treat it as suspicious and report it.
• If your business relies on macros in its own spreadsheets, talk to your IT provider. Trusted files can be stored in a trusted location or signed, so they work without loosening the rule for everything else.