Protecting a PDF is two separate controls: a password that stops the file from opening, and permissions that decide what a reader may do after it opens. Knowing which one you need prevents a lot of false confidence.
Step by step
-
1
Upload your PDF
Drag your PDF onto the box or click Choose file. It is sent over an encrypted connection and only used for this task.
-
2
Set the options
Adjust password, admin password to change permissions (optional), encryption and allow printing. Every field has a sensible default, so you can usually run the tool straight away.
-
3
Pick what stays allowed
The password stops the file being opened at all. The permission options decide whether printing, copying and editing are permitted afterwards.
-
4
Run it and download
Press Protect and the page shows progress while it works. When it finishes you get a download link — nothing is emailed and nothing is stored longer than it needs to be.
Password vs permissions
An open password encrypts the document; without it, the PDF cannot be read. Permissions are flags for printing, copying, editing and annotating — useful for policy and workflow, but not a cryptographic guarantee. A determined reader can bypass permissions on some files. If the content is genuinely sensitive, use a strong open password and share it separately.
Choose a password you can actually share
Use a long random password from a password manager, not a birthday or a project name. You need to send it to the recipient through a different channel from the PDF itself: if both travel in the same email, the password protects nothing. For one-off sharing, a password manager’s “share” link or a short phone call is enough.
Permissions worth setting
For a document that should be read but not changed, disable editing and annotation. For a review copy, allow comments but stop printing. Do not disable printing on a document the recipient is expected to sign on paper; the restrictions will only cause a support call. Record what you chose so the next version matches.
What encryption cannot do
It cannot stop someone who can already see the page from taking a photo of the screen, and it cannot recover a forgotten password. Keep an unencrypted master in a safe place, especially for contracts and records. If the goal is an authenticated signature rather than confidentiality, use E-Signer, which adds identity checks and an audit trail.
Good habits for Protect
- Keep a copy of the password — PDFwerk cannot recover it for you.
- Unlocking needs the current password; the tool does not break encryption.
- Permissions are advisory: a determined reader can bypass them, so use a password when the content really matters.
Common questions
Is this tool free?
Yes. Every tool on this site is free to use, with no sign-up, no watermark and no daily task limit.
Do I need to install anything?
No. The tools run in your browser and are processed by this server.
What happens to my files?
They are stored under an unguessable id and swept automatically after a couple of hours. Nothing is shared or indexed.
Does it work on a phone?
Yes. The page pickers and editors are built for touch, so dragging, rotating and selecting pages all work without a mouse.
What does Protect do exactly?
Protect file with password and permissions
Can I remove the password later?
Yes, if you know the current password. Use Unlock PDF, then protect the new copy with a different password if needed.
Does a password stop copying text?
Permissions can discourage it, but they are not a hard guarantee on every viewer. For content that must not be copied, control who receives the file in the first place.
What if I forget the password?
A properly encrypted PDF cannot be recovered by the tool. Restore an unencrypted master from your backup, or recreate the document.