How to Password Protect a PDF

Why password-protect a PDF?

Documents leave your hands the moment you send them. Email gets forwarded, cloud links get shared, and a file that was meant for one person can end up opened by several. A password stops that: even if the file itself is intercepted or misplaced, its contents stay unreadable without the password.

It is also the simplest way to satisfy policies that require encrypted attachments — for invoices, contracts, medical paperwork, student records, and internal reports. Because encryption is applied before the file leaves your device, you never have to trust a third-party service with the document or the password.

For businesses, encryption is often the difference between a compliant attachment and a policy violation. Many finance, legal, and healthcare workflows simply refuse unencrypted PDFs, and adding the lock yourself takes less time than requesting an exception.

Everyday files qualify too. A signed lease, a will draft, tax returns, a school permission slip, or a passport scan all carry information that should not be readable by whoever finds the file in a shared inbox or on a lost laptop. Encryption costs nothing and applies to all of them equally.

What you’ll need before you start

You need the PDF you want to lock and a password you can remember but others cannot guess. That is all. No account, no software, no email address. The tool runs in any modern browser, including on phones and tablets, and it works offline once the page has loaded.

It also works the same way for scanned documents, although the resulting file remains an image-based PDF — the encryption does not care whether the pages contain text or pictures.

How to password-protect a PDF, step by step

The workflow below encrypts a document with AES-256 in a few clicks, on whatever device you have open.

1. 1

   Open the Protect PDF tool

   Click the Protect PDF link on this page. The file picker appears with a password field beside it.

2. 2

   Add your document

   Select the PDF you want to lock from your device, or drag it onto the file picker. The file loads locally and is never sent anywhere.

3. 3

   Enter a strong password

   Type the password into the password field. Use at least twelve characters with a mix of words, numbers, and symbols so it resists guessing attacks.

4. 4

   Encrypt and download

   Click the Protect PDF button. Encryption happens on your device in a second or two, then a Download protected.pdf button appears.

5. 5

   Verify the lock

   Open the downloaded file in a different PDF viewer. It should ask for the password immediately — that prompt is your proof the encryption worked.

Choosing a strong password

The encryption is only as good as the password in front of it. AES-256 can withstand enormous guessing effort, but a password like summer2026 will not. Length beats complexity: three or four unrelated words strung together are both stronger and easier to remember than a short string of symbols.

Do not reuse a password you use elsewhere. A leak from an unrelated site hands attackers a key that also opens your PDF. If you need to share the password with someone, send it through a different channel than the file itself — the whole point of encrypting the document is that the password and the file never travel together.

Remember that PDF passwords have two flavors. A user password gates opening the file; an owner password gates printing and copying. This tool sets the password that gates opening — which is what most people mean by protecting a document.

A password manager solves both problems at once: generate a long random password when you encrypt, let the manager store it, and share the password through whatever channel the recipient already trusts. The file stays encrypted at rest no matter which channel the password travels through later.

Common mistakes to avoid

The classic mistake is emailing the password and the PDF in the same message. Encryption protects the file at rest, not the channel you use to announce its password. Send the password by chat or phone call instead.

The second mistake is forgetting the password after locking the file. There is no recovery backdoor — by design. Store the password in a password manager the moment you create it, before the locked PDF goes anywhere.

The third is assuming protection hides the metadata. Encrypting a PDF hides its pages and text, but some document properties can remain visible depending on the viewer. If titles or author names should stay private too, clear them with PDF Metadata before encrypting.

Finally, do not expect a locked PDF to stay locked if you later share the password with a large group. Every person who knows the password can remove it again with Unlock PDF. Protection is a boundary, not a surveillance system.

One more habit worth building: test the encrypted copy on the device you actually use day to day. Very old PDF readers sometimes struggle with modern AES encryption; if the file opens without a prompt there, the viewer is at fault — any current browser or PDF app will ask for the password as expected.

Protect PDF — try it free

Lock a document in under a minute with the Protect PDF tool. AES-256 encryption runs on your device, the password never leaves the browser tab, and the result is a standard PDF that opens in any viewer once the password is entered. Nothing leaves your device, no sign-up, and no limit on how many files you protect.

Already have a protected file you need to open? Unlock PDF removes the password from documents you are allowed to open — same privacy model, same browser-only processing, same free price.

If you routinely send sensitive files, build the habit: encrypt before you attach, verify the password prompt on the first open, and store the password before you hit send. Thirty seconds of habit beats an hour of damage control.

Frequently asked questions