Updated 2026-10-20

Why Is My CSV File Read-Only (View Only)? 6 Causes

A CSV file cannot be protected. The format has no password, no permission header and no read-only flag; RFC 4180 describes text and nothing else. So when a CSV refuses to accept a keystroke, the cause is around the file: the app opened it in a protected mode, the operating system marked it read-only, the copy belongs to someone else, another program holds it, or what you opened was never the file.

Quick answer

Read the message, not the file. If the title bar says Protected View or Read-Only, the app did it and there is a button to leave that mode. If the file is on your desktop and still refuses edits, the permission belongs to the file or its folder. If the edit control is greyed out in a browser tab, you are looking at a shared copy. If the whole file sits in one cell, it is not a CSV. Those four checks cover every case below and take under a minute.

1. Excel opened the file in Protected View

This is the most common cause, and it is deliberate. Microsoft's own description is blunt: files from the internet and from other potentially unsafe locations are opened as read only or in Protected View, which is "a read-only mode where most editing functions are disabled". The triggers listed in that article include a file opened from an internet location, an Outlook attachment from a sender your policy treats as unsafe, a folder the administrator marked unsafe, a file blocked by File Block, and a file opened from someone else's OneDrive.

CSV files get their own switch. In Excel's Trust Center there is a Microsoft 365 setting named Always open untrusted Text-Based files (.csv, .dif and .sylk) in protected view. When it is on, a plain CSV from an untrusted location always lands in the read-only mode, even though a spreadsheet full of numbers looks harmless. A policy pushed by an administrator can set the same thing.

The fix, in order of preference: click Enable Editing on the yellow message bar if the file is from someone you trust. If the bar is red, use File > Edit Anyway, which Microsoft flags as a decision to make only for trusted content. If the same folder keeps producing the warning, add it as a trusted location instead of clicking through the bar every morning. Turning Protected View off globally is the one fix worth avoiding; it is the layer that stops a malicious attachment from running.

2. The read-only attribute is set on the file

Here the app is innocent. Windows has a per-file Read-only checkbox under Properties, and macOS has a Locked checkbox in Get Info plus ordinary Unix permissions underneath. Files copied from a CD or DVD, from a mounted disk image, or from a network share where your account has read access only arrive with that state already set. So does a file pulled out of a zip archive that was itself on read-only media.

We tested what that looks like at the filesystem level on 2026-10-20. After chmod 0444, the file reports mode 0o444, a write-access check returns False, and both open(file, "a") and pandas' to_csv fail with PermissionError: [Errno 13] Permission denied. After chmod 644 the same check returns True. That is the whole mechanism, and every spreadsheet app is reporting the same bit.

• Windows: right-click > Properties > clear Read-only, or attrib -R file.csv.
• macOS: select the file, File > Get Info, clear Locked, and check Sharing & Permissions for your account.
• Any Unix shell: chmod u+w file.csv, or copy the file to a folder you own.

If none of those work, the folder is the problem, not the file. Copying to the desktop is the fastest test: it changes the location and the permissions in one step.

3. The copy belongs to someone else

A CSV opened in Google Sheets can show View only in the toolbar even though the file on your disk is untouched. That label is a Drive sharing permission: you are a Viewer, not an Editor. The same applies to a SharePoint or OneDrive file shared as view-only, and to a file that has been checked out by another person.

Two fixes, and only one of them needs the owner: use File > Make a copy to get an editable version in your own Drive, or request edit access. Do not spend time looking for a password prompt, because there is none to find. This is also the case where the "file" is not really a file yet: if the URL is a document link, you are editing the owner's copy of the data, not bytes on your machine.

4. Another program is holding the file

Open the same workbook twice and the second window is read-only, with a message naming the other user or the other session. Excel writes a small lock file next to the document while it is open, and a sync client can hold a file briefly while it uploads. The CSV itself is not locked; the application is refusing to let two writers diverge.

Close the other window, or close the app entirely if the file came from a crashed session, then reopen. If the warning persists with nothing else open, make a copy with a new name and work on that. The related problem, where the edit is accepted but disappears after saving, is covered in why a CSV will not keep your changes.

5. You are looking at a preview, not the file

Quick Look on macOS, the attachment preview in Outlook, the built-in viewer in a chat app, and a browser tab showing a text/csv response all render the file without opening it for editing. Nothing you type can be saved because there is no document to save into. The tell is the window: no path in the title bar, no Save item in the menu, and often a download button instead.

Save or download the file first, then open it from the folder it landed in. If the file came from a web app that streams the export, check where the browser put it before assuming the download failed; a file that never arrived is a different problem from a file that will not open, and the upload-side checklist covers the size and type caps that usually cause it.

6. The file is not a CSV

Two fakes produce exactly this symptom. The first is a web page saved with a .csv name, which happens whenever a portal requires a login and the browser saves the sign-in page instead of the export. The second is a workbook renamed from .xlsx to .csv, which keeps its zip internals and opens as a single unreadable cell or as garbage.

The first eight bytes settle it, and we checked both on 2026-10-20:

In a terminal, head -c 8 file.csv prints those bytes. In a text editor, the first line is enough: a tag means HTML, and binary noise means a compressed format. A file that opens as a single column of markup is the same story seen from the spreadsheet side, which is why the one-column diagnosis starts by asking what the first line contains.

Symptom to cause, in one table

What not to do

• Do not disable Protected View for everything to get past one file. Microsoft's own guidance is to edit only what you trust, and the setting guards every document type, not just CSVs.
• Do not rename the file to .xlsx to get edit rights. That converts nothing and usually produces a corrupt file warning on top of the original problem.
• Do not keep saving copies as a workaround. Several near-identical exports is how version confusion starts; one working copy with an obvious name is easier to keep straight, and the garbled-text guide covers what to do when the data itself, not the permission, is what came out wrong.

When the file is fine and the app is the obstacle

If you only need to change values, a browser tool sidesteps every permission layer above, because it works on a copy you hand it: the CSV cleaner trims whitespace, drops blank rows and duplicates and writes a fresh file you own. If the question is whether the file is intact, the CSV analyzer reports the header, the field count per record and the column widths without saving anything.

Frequently asked questions

Sources

• Microsoft Support, "What is Protected View?" (files from the internet and other potentially unsafe locations open as read only or in Protected View; Protected View is a read-only mode where most editing functions are disabled; the list of triggers; Enable Editing and File > Edit Anyway; the Excel-only Trust Center option "Always open untrusted Text-Based files (.csv, .dif and .sylk) in protected view").
• IETF, RFC 4180: Common Format and MIME Type for CSV Files, section 2 (records, fields, quoting, CRLF). The format defines no permission, password or protection field.
• Our own measurements, 2026-10-20, Python 3.13.5, unprivileged user: a file at mode 0o444 reports os.access(W_OK) False, and both append and pandas to_csv raise PermissionError: [Errno 13]; at 0o644 the check returns True. First-byte signatures: an HTML page saved as .csv begins 3c 21 44 4f 43 54 59 50, a renamed .xlsx begins 50 4b 03 04, and a real CSV begins 61 2c 62 0d 0a.

Related reading

Edit the data without fighting the permissions

Most read-only CSVs are read-only for reasons that have nothing to do with the data. If the goal is a clean copy you control, start from the file rather than from the app that refuses to save it.