Encrypt Company File

Password Protection on Save

When saving your .grandtotal file, you can optionally set a password. The file is then secured with AES encryption (Advanced Encryption Standard) – a globally recognized encryption standard also used by governments and banks.

This encryption protects your sensitive business data from unauthorized access, even if the file falls into the wrong hands.

Secure Password Management

The password you choose is stored securely in the macOS Keychain by default. This means you don't need to re-enter it every time you open the file – GrandTotal retrieves it automatically from the Keychain.

The Keychain is Apple's central, encrypted database for passwords and other sensitive information on your Mac.

Encryption is particularly useful when you:

• Store files in the cloud (Dropbox, Google Drive, etc.)
• Want to protect sensitive customer data or pricing calculations
• Work with mobile devices that could be lost
• Need to meet compliance requirements such as GDPR

Encryption is a good security measure that protects your sensitive business data with minimal effort.

Encryption happens transparently in the background and has no noticeable impact on the speed of opening or saving the file.

Risk Assessment

An important question: What's more likely – that someone cracks your encrypted file, or that you forget your password?

For most users, the risk of forgetting or losing the password is significantly higher than the risk of a targeted attack. That's why storing it in the Keychain is a good choice: it protects against unauthorized access while preventing data loss from forgotten passwords.

Retrieving Your Password

If you want to retrieve the password from the Keychain, you can use the "Keychain Access" app. Search for the name of your .grandtotal file – the password will be displayed as an entry.