Protected View is a Microsoft Office security mode that opens untrusted files in a restricted, read-only state. In this mode, the document can be viewed but not freely edited, and risky features such as macros, embedded content, or direct file interaction are limited until the user explicitly trusts the file.
It matters because Office documents are a common attack vector. Email attachments, downloaded files, and files from internet zones are often opened first in Protected View to stop malicious code from running immediately. This can block or slow attacks that rely on automatic execution, exploit chains, or social engineering. Defenders use it as a safety buffer, but it is not a complete fix: a vulnerable parser, a malicious preview path, or a user who disables protection can still expose the system. Protected View works best alongside patching, attachment scanning, and other Office security controls.