How to Password Protect a PDF Online for Free

Sensitive documents — contracts, financial statements, medical records, personal information — should not be accessible to anyone who happens to open them. Adding a password to a PDF is the simplest and most effective way to control who can view your documents. Here is how to do it for free in your browser.

What Does Password-Protecting a PDF Do?

When you add a password to a PDF, it encrypts the file contents using AES encryption. Anyone who tries to open the PDF without the correct password will see an error or a prompt asking for the password. The content is completely unreadable without it.

Two Types of PDF Passwords

PDF security has two levels. Our tool applies both:

• Open password (User Password): Required to open and view the document at all
• Owner password (Permission Password): Controls what the viewer can do — print, copy, edit etc.

Setting both means the PDF requires a password to open, and even once opened, copying and modifying is restricted.

What Encryption Actually Protects Against

It's worth understanding what password protection realistically achieves. A well-chosen password with proper encryption makes a document genuinely inaccessible to casual or opportunistic access — someone who finds the file in a shared folder, or receives it by mistake, can't simply open it in a PDF reader. It also adds protection during transmission — if an email is sent to the wrong recipient, an encrypted attachment at least requires a password before its contents are visible. What it doesn't protect against is a determined attacker with significant time and specialised tools, particularly if the password itself is weak — the strength of the encryption is only as good as the password protecting it, since a short or common password can be defeated by automated guessing regardless of how strong the underlying algorithm is. For everyday sharing of sensitive-but-not-extreme-stakes documents, a reasonably strong password provides solid, proportionate protection.

When Should You Password-Protect a PDF?

• Before emailing financial documents, payslips or tax returns
• Before sharing contracts or legal agreements
• When distributing confidential business reports
• Before uploading sensitive documents to cloud storage
• When sharing medical or personal records digitally
• Protecting sample documents from being used as final versions

Choosing a Strong Password

• Use at least 8 characters — longer is stronger
• Mix uppercase, lowercase, numbers and symbols
• Avoid obvious passwords like 1234, password, or your name
• Use a different password for different sensitive documents
• Store passwords in a password manager — never in the document itself

Sharing Protected Documents Safely

The password itself needs to reach the intended recipient somehow, and how you share it matters as much as how strong it is. Sending the password in the same email as the protected attachment largely defeats the purpose — if that email is intercepted or sent to the wrong person, both the file and the key to open it travel together. Sending the password through a different channel — a text message, a messaging app, or a phone call — means that even if one channel is compromised, the document remains protected. For recurring sharing with the same recipient (a regular client, for example), agreeing on a shared password convention in advance (communicated once, securely) can avoid needing to share a new password every time, though using unique passwords per document remains more secure if practical.

Step-by-Step Guide

1. Open the Protect PDF tool
2. Upload your PDF (up to 25MB)
3. Enter your chosen password
4. Re-enter to confirm — this prevents typos
5. Click Protect PDF
6. Download your encrypted, password-protected PDF

Important Warning

If you forget the password, there is no recovery option. The encryption is real — even we cannot recover your document if the password is lost. Always store your password somewhere safe, such as a password manager. If you need to remove a password from a PDF you own, use our Unlock PDF tool.

Protecting Documents as Part of a Larger Workflow

Password protection is typically one of the very last steps before sharing a document, applied after all editing — merging, page removal, watermarking — is complete. If you protect a document and then realise you need to make further edits, you'll need to unlock it first using our Unlock PDF tool (which requires knowing the current password), make your edits, and then re-protect the result. Keeping this "edit first, protect last" order in mind avoids the extra unlock-edit-reprotect cycle that's needed if protection is applied too early in the process.

Is My PDF Uploaded to a Server?

No — encryption happens entirely in your browser. Your PDF and password are never sent to any server. Everything stays on your device throughout the entire process.