Example implementations relate to multi-protocol access control lists. In an example, a multi-protocol access control list (ACL) is maintained in an extended attribute of an object stored in a file store. The multi-protocol ACL holds a primary ACL in a format associated with a primary protocol of a file store and a secondary ACL in a format associated with a secondary protocol.