Protect PDF with Password — Free Encryption

Protect PDF adds a password to a document before you share it. It is intended for ordinary confidentiality needs such as statements, contracts, HR files, school records, or business documents that should not open casually.

What happens in the browser

The browser encrypts the PDF and writes encryption information into the document structure. A PDF reader later asks for the password, derives the key, and decrypts the document for authorized viewers.

Step-by-step workflow

  1. Choose the PDF you want to protect.
  2. Enter a strong password that you can store safely.
  3. Select available permission options if needed.
  4. Create the encrypted PDF in the browser.
  5. Download the protected copy and send the password through a separate channel.

When this tool is useful

  • Sharing sensitive documents by email.
  • Adding a barrier before uploading files to a shared portal.
  • Protecting financial, legal, school, or personnel records.
  • Creating a safer copy for temporary transfer.

Limitations to know before downloading

  • Password protection is not redaction and does not remove sensitive text.
  • If you forget the password, the file may not be recoverable.
  • Permission flags such as no-copy or no-print can be ignored by some viewers.

Privacy and file handling

The password and PDF stay in the browser session while the protected copy is generated. The site does not receive the file or the password.

Password-protecting a PDF — real security vs perceived security

Adding a password to a PDF is a two-minute job that gives a very specific kind of protection: the file cannot be opened without the password, and (if you set an owner password) certain actions like printing and copying can be blocked. What it is not is bulletproof DRM — anyone with the password has the file, and any decent PDF library can strip owner restrictions once opened. Set expectations accordingly.

What password protection actually does

PDF encryption (AES-256 in modern viewers) protects the file contents against someone who intercepts the file but does not have the password. It is genuine cryptography — a strong password on an AES-256 PDF is not brute-forceable in any realistic timeframe. What it does not do is prevent the legitimate recipient from screenshotting, re-typing, or re-sharing the decrypted content once they open it.

User password vs owner password

  • User password — required to open the document. This is the one you send separately (in another channel, never in the same email as the file).
  • Owner password — required to change permissions. Lets you allow open-but-not-print, or open-but-not-copy. Note: many free PDF tools ignore owner restrictions entirely, so treat these as a polite request, not enforcement.

Step-by-step

  1. Upload the PDF you want to protect.
  2. Enter a user password (open password). Use 12+ characters mixing letter/number/symbol.
  3. Optionally set permissions: allow or block printing, copying, editing, and form-filling.
  4. Click Protect. The encrypted PDF downloads. Send the password via a different channel — SMS, Signal, phone call — not in the same email.

Password rules that actually matter

The single biggest predictor of a PDF password being cracked is length. A 6-character password from a common English word list is broken in seconds. A 14-character random string is safe for decades. Use a password manager to generate one, and never reuse a password from another account. If the file is truly sensitive (contracts, medical records, tax filings), consider wrapping it in a 7-Zip archive with its own password on top — defence in depth.

When a password is not enough

For anything requiring genuine access control — revoking a recipient's access later, tracking who opened the file, expiring links — you need a proper document rights management system (Adobe Experience Manager, DocSend, Vitrium). PDF passwords are a lock on the file, not a control system around it.