How to Password Protect a PDF and Choose a Strong Password

Tax documents, payslips, medical records and signed contracts all end up as PDFs, and many of them travel by email. Adding a password means that if the file lands in the wrong inbox or a shared folder, it’s just unreadable noise to whoever finds it.

Protecting a PDF takes a minute. The parts that actually decide whether it’s secure are which kind of protection you choose, how strong the password is and how you share it. This guide covers all three, plus how to remove protection from your own files later.

Two kinds of PDF protection

PDFs support two separate passwords, and they do very different jobs. Mixing them up is the most common mistake.

	Open password	Permissions password
Also called	User password, document open password	Owner password, restrictions
What it does	Encrypts the file; nobody can view it without the password	Limits printing, copying text or editing
Can anyone open the file	No	Yes
Real security	Strong, if the password is strong	Weak; it’s a polite request that compliant readers respect
Good for	Confidential documents	Discouraging casual copying or edits

The honest truth about permission restrictions: they rely on PDF software choosing to obey them, and plenty of tools don’t. They’re useful for signaling intent, such as “please don’t edit this price list,” but they won’t stop someone determined. If the content is genuinely confidential, use an open password.

How to password protect a PDF step by step

Our free PDF protection tool encrypts the file in your browser, so the unprotected document is never uploaded anywhere. The protected file works in every standard PDF reader.

1. Keep an unprotected copy somewhere safe. If you lose the password, this is your only way back in.
2. Open the tool and add your PDF.
3. Set an open password. Use a strong one; see the next section for what that means in practice.
4. Choose permissions, if you want them. Decide whether people may print, copy text or edit. For a confidential file, the open password does the heavy lifting; restrictions are optional extras.
5. Download the protected file.
6. Test it. Open it in a PDF reader, confirm it asks for the password and that the password works, before you send it.

Prefer other software you already have? Adobe Acrobat and LibreOffice’s PDF export both offer password options too. On a Mac, Preview can add a password when you export a PDF.

Choosing a password that actually protects

PDF encryption in modern files is strong. The weak point is almost always the password. Someone who gets hold of the file can try guesses offline, at high speed, as many times as they like. No lockout after three attempts, no alert.

That changes what “strong” means:

• Length beats cleverness. A long passphrase of four or five random words is far harder to crack than a short password with a symbol swapped in.
• Avoid anything guessable. Birthdays, names, the company name plus the year, and the file name itself are the first things an attacker tries.
• Don’t reuse passwords. If you use the same password for every PDF, one leak exposes them all.
• Use a generator. Our password generator creates random passwords or memorable passphrases with your browser’s secure random generator, and it can check the strength of one you already have.

For a file you’ll share with someone who has to type the password, a passphrase is the friendliest strong option. Something like four unrelated random words is easy to read out over the phone and hard to guess. Our guide on how strong your password really is goes deeper on this.

Sharing a protected PDF safely

A password sent in the same email as the file protects almost nothing. If someone gets access to that email, they have both pieces.

• Send the file by email and the password by text message, a phone call or a messaging app.
• For recurring exchanges, such as monthly payslips, agree a password once in person or by phone instead of resending it.
• Don’t put the password in the file name or the email subject. It happens more often than you’d think.
• Store passwords for your own archived PDFs in a password manager, not a text file on the desktop.

Removing protection from your own files

Sometimes the password becomes a nuisance. Your bank sends statements protected with a password you have to type every time, or you want to merge, compress or convert a protected file, and the tool won’t open it.

If you know the password and the file is yours, our PDF unlocker removes the open password and the printing or copying restrictions, so you get a normal PDF that opens straight away. You’ll enter the password once, and the tool saves an unprotected copy. Like the other tools, it works in your browser.

A few ground rules:

• Only unlock files you own or have permission to change. Removing restrictions from someone else’s document can break their terms of use or the law, depending on where you are.
• An unlocked copy has no protection, so store it somewhere secure, such as an encrypted drive.
• Unlocking isn’t password recovery. If you’ve forgotten the open password, a well-protected file stays locked, which is exactly the point.

When a password isn’t the right tool

Password protection is great for single files sent by email. It’s less suited to some jobs:

• Ongoing collaboration. Shared drives with proper access control let you revoke access later. A password, once shared, can’t be taken back.
• Hiding parts of a document. If only some details are sensitive, remove those pages or redact them properly rather than protecting the whole file.
• Proving authenticity. A password doesn’t show who created a file or whether it was changed. That’s the job of a certificate-based digital signature.

The checklist

Use an open password for anything confidential, and treat permission restrictions as a courtesy rather than security. Generate a long, unique password or passphrase, send it separately from the file, and test the protected PDF before it goes out. Keep an unprotected original in a safe place, because a forgotten password usually means a lost file.

Frequently asked questions

Free tools for this