Protect a PDF with a Password
Password-protecting a PDF is the simplest way to make sure a file that leaves your device stays readable only by the people you meant to share it with. This guide covers when password protection actually helps (and when it doesn't), how to choose a password that resists common attacks, and how to add or remove protection in your browser without installing anything.
What password protection actually does
PDF password protection is real encryption — the file's contents are transformed into ciphertext, and only the correct password can restore them. Two modes matter in practice:
- User password (open password) — required to open and view the PDF at all.
- Owner password (permissions password) — the file opens without a password, but printing, copying text, and editing can be restricted.
The user password is the one that actually secures the content. Owner-password-only restrictions are trivial to strip with commodity tools, so treat them as a polite request, not a security control.
When to use a password
Use one when the PDF contains:
- Personal identifiers (passport, driver's license, tax ID).
- Financial statements, invoices with account numbers, or wire instructions.
- Medical records or anything covered by HIPAA/GDPR.
- Contracts before signature.
- Trade secrets or unpublished pricing.
You don't need a password on genuinely public documents — a marketing brochure, a published research paper, a job posting. Encryption there just adds friction.
Choosing a strong password
Modern PDFs use AES-256 when the reader supports it, which is strong. The weak link is almost always the password itself.
- Length beats complexity. A four-word passphrase such as
harbor-mint-turtle-badgeis easier to remember and stronger thanP@ss123!. - Avoid names and dates that appear anywhere else — birthdays, pet names, company names.
- Never reuse a password you already use for email or banking.
- Share the password out of band (a phone call, SMS, or a different messaging channel), not in the same email as the PDF.
How to add a password to a PDF in your browser
Our Protect PDF tool runs locally; the file and password never leave your device.
- Open the tool and drop your PDF.
- Enter a user password (this is the one recipients will need to open the file).
- Optionally set an owner password to disable printing or copying.
- Choose AES-256 for maximum compatibility with modern readers.
- Click Protect and download the encrypted copy.
How to remove a password
If you have the correct password, the same tool can decrypt:
- Drop the encrypted PDF.
- Enter the current password when prompted.
- Click Unlock and download the plaintext copy.
Sharing a protected PDF safely
- Send the file and password through two different channels — for example, email the PDF and text the password.
- Prefer a passphrase you can dictate cleanly on a phone call.
- Set a reminder to rotate the password if the file will be re-shared over time.
- For internal use, consider a permissions-only owner password so the file opens without friction but printing/copying is discouraged.
Troubleshooting
- "The recipient can't open the file." Confirm they're using a current PDF reader that supports AES-256. Older versions of Preview and some mobile readers only support AES-128; re-encrypt with that if needed.
- "I forgot the password." There is no reset. Password recovery tools rely on guessing and only succeed against weak passwords. Regenerate the PDF from the source if you can.
- "Printing/copying still works after I set the owner password." Some readers ignore owner restrictions. Rely on the user password if the restriction actually matters.
Frequently asked questions
Does password protection prevent screenshots? No. Anything visible on screen can be captured. Encryption controls access to the file, not what a reader does after opening it.
Are my files or passwords uploaded? No. Everything runs locally in your browser.
Which encryption strength should I pick? AES-256 unless you know the recipient uses an older reader.
Related tools
- Protect PDF
- Sign PDF — add an electronic signature.
- Compress PDF — shrink before sending.