How to Password-Protect a PDF — and What It Actually Protects
“Protect my PDF” can mean two entirely different jobs, and the tools that conflate them end up protecting the wrong thing. Here is the mental model worth having before you encrypt anything.
Lock one: the open password
The file cannot be opened at all without the password — it arrives as an encrypted blob. This is the lock you want for a tax return, a medical record or anything you would not post publicly. Choose AES-256 for it; older schemes (RC4, even AES-128) exist only for compatibility with ancient readers.
Lock two: permissions (the owner password)
The file opens for anyone, but the rule book says what they may do with it: copying text, printing, editing — each can be denied. This is a cooperative lock: mainstream readers honour the rules, and a determined person with the right software can ignore them. That is not a reason to skip it — legal and corporate workflows genuinely depend on the signal — but do not confuse it with secrecy.
What no password will protect you from
The person you sent the file to. If the password travels in the same message, chat or email thread as the PDF, you have locked the door and taped the key to it. Send the password through a different channel — a call, a second app — and the lock starts earning its keep.
Doing it here, in thirty seconds
- Open Protect PDF and drop the file in.
- Set the open password (what recipients type) and, if you want rules, the owner password and the permission toggles — printing, copying, editing.
- Pick AES-256 — it's the default here — and save.
The result is encrypted on the spot and downloadable immediately; the original is untouched, and both copies are purged from our side after two hours.
Forgot the password?
If you know a password but the file keeps its permission locks, Unlock PDF removes them cleanly. If you have truly lost the open password, there is no legitimate shortcut — and any tool claiming to “crack” files you can't open is a story with a bad ending.
Open password vs permissions
An open password encrypts the document; without it, the PDF cannot be read. Permissions decide what a reader may print, copy or edit after opening. The first is a lock; the second is an instruction to well-behaved software. Do not rely on permissions alone for confidential content — use a strong password and control who receives the file.
Share the password separately
Send the PDF by one channel and the password by another: a password manager share, a phone call, or an encrypted message. If both travel in the same email, the lock is decorative. For a team, store the password in the team vault and record which document version it belongs to; passwords get lost when they live only in a chat thread.
What protection cannot do
It cannot stop a reader from photographing the screen, and it cannot recover a forgotten password. Keep an unencrypted master in a safe place, especially for a signed contract. If the requirement is proof of who signed rather than confidentiality, use the E-Signer workflow, which adds identity checks and an audit trail. For permanent removal of sensitive content rather than access control, use Redact PDF first.
Try it: protect a PDF here — free, no sign-up, and the working copy is purged automatically after two hours.