Mendip Data Systems

Database applications for businesses and schools


Security Challenge 2 - Hidden Message

This is the second in a series of security challenges.

These are designed to show ways of making Access apps reasonably secure.


The application is an ACCDE file so all VBA code has been removed.

The file has been renamed as a runtime file (ACCDR). It will not run if the file type is changed.


Startup properties have been modified.

There is no access to the navigation pane, ribbon or the rest of the application window

The taskbar has also been removed. It is restored automatically when the application closes


The challenge is intended to be solvable.

Various clues have been provided which are intended to help achieve a solution.

The app is password protected but all the information to obtain that has been provided on this page

... if you look and think carefully


A password cracking utility is NOT required ... and using one will be considered as cheating!


The challenge is to:

a) unlock the database, obtain the name and contents of the hidden table

b) open the main form and find out how to enable the 'Click Me' button

c) work out the meaning of the message displayed


The first part should be relatively straightforward if approached in the correct way.

The rest of this MAY be a little harder to accomplish.


Obtaining the full solution will need a mixture of problem solving skills and knowledge of some of the deeper recesses of databases



You can only run this application FOUR TIMES once you have deduced the correct password.

After that it will be disabled, so plan carefully


I hope you enjoy puzzling out this challenge


If you succeed, please follow the supplied instructions to provide feedback by email (or use the feedback form provided)

Please include the answers to a, b & c together with how you solved the challenge and the approximate time taken. Screenshots may be useful


NOTE: Access databases, including this one, can NEVER be made 100% secure

A capable and determined hacker can break any Access database given time


Both 32-bit & 64-bit versions have been supplied

Click to download the correct version for your computer:

     Hidden Message Challenge (32-bit)    Approx 0.6 MB (zipped)

     Hidden Message Challenge (64-bit)    Approx 0.8 MB (zipped)


If you get totally stuck on the password, click this link for some additional hints


Nil illegitimi carborundum est

iStock_000002894402Medium iStock_000005251211Large-LOW-RES 2-300x172 education tools Return to Security Challenges Page

Click the image to view a larger version ...

Difficulty Level  

Star Star Star