Password-protect a PDF

Drop PDFs here

or click to choose — files and password stay on your device

Restrict printing, copying or editing (optional)

Well-behaved PDF apps obey these, but anyone who can open the file can remove them with free tools — our own Unlock PDF does it in one click. Treat them as a polite request; the open password is the real protection.

Choose a password and your PDF is encrypted with AES-256, the strongest method the PDF format offers, right here in your browser — the document and the password are never uploaded. Before you download, the tool re-opens the protected file with a separate PDF reader to confirm it refuses to open without the password and opens with it. It also hides more than most tools do: the page count, page sizes and font names are encrypted along with the content. Protect several files at once with the same password, and optionally block printing, copying or editing.

How to password-protect a PDF

  1. Drop one or more PDFs into the box above.
  2. Type the password that should be needed to open them, then type it again.
  3. Optionally open Restrict printing, copying or editing and tick what to block.
  4. Click Protect PDF. Each file is encrypted and checked, then ready to download as …-protected.pdf.

The original file is not changed. Several files get the same password; download them one by one or together as a ZIP. If a file is already protected, the tool says so instead of encrypting it twice — remove the old password with Unlock PDF first if you want to set a new one.

Checked before you download

A protected file that quietly opens without a password is worse than no protection, because you believe it is safe. So after encrypting, the tool opens the result again with a different PDF reader from the one that encrypted it and runs two tests: the file must refuse to open without the password, and it must open with your password and show the same number of pages as the original. The outcome is written under the download button. If either test fails, you see a warning instead of a green tick.

What encryption hides — and what it doesn't

PDF encryption scrambles the text, images, links and document information such as the title and author. It does not scramble the file's skeleton — and in many PDFs that skeleton gives away more than people expect. We printed a two-page letter to PDF from Chrome, encrypted it with AES-256 in two ways and searched each result for readable details:

Readable without the passwordStandard encryptionThis tool
Number of pagesYesNo
Size of every pageYes (both page boxes)No
Names of the fonts usedYes (Georgia, Georgia Bold)No
Pixel size of each imageYesYes
File size42.1 KB31.1 KB

The difference comes from how the file is packed. Most PDFs saved from browsers and office programs keep each page's description as plain structure next to the encrypted content. Before encrypting, this tool packs those descriptions into compressed, encrypted sections, which also makes the file smaller. Image dimensions and the file size cannot be hidden by any PDF encryption; when your document contains images, the result tells you how many.

Open password vs. restrictions

The open password is real protection: without it, the content is encrypted with AES-256 and cannot be read. Restrictions on printing, copying and editing are a different thing. They are a note inside the file that PDF apps are asked to respect. Adobe Reader and most viewers do, but anyone who can open the file can strip them with free software, including our own Unlock PDF. Use them to discourage casual copying of a shared handout, not to protect secrets.

Restrictions are tied to a second, permissions password. It has to differ from the open password; if the two are the same, whoever opens the file also has the right to lift the restrictions. Leave the field empty and a random 20-character one is created and shown with the result, so you can lift the restrictions later if you need to.

Choosing a password

Once someone has the file, nothing limits how many passwords they can try. AES-256 does not help if the password is summer2026. Three or four unrelated words, or 12 or more mixed characters, keep the file out of reach. Send the password by a different route from the file — a text message or a phone call rather than the same email — and keep it in a password manager, because a forgotten PDF password cannot be recovered.

Digitally signed PDFs are a special case: adding a password rewrites the file, and signature checkers then report the signature as broken. The tool warns you when a file carries a digital signature. To fill or sign a document before protecting it, use Fill PDF Form or Sign PDF; to make it small enough to email, compress it first, because an encrypted file cannot be compressed afterwards. More tools are on the PDF tools page.

Frequently asked questions

How secure is a password-protected PDF?

With AES-256 and a strong password, the content cannot be read without the password. The weak point is almost always the password itself: anyone holding the file can try passwords as fast as their computer allows, with no lockout after wrong guesses. A short word, a name or a date can be found quickly that way; a password of 12 or more characters, or three or four random words, is far out of reach. Never send the password in the same email as the file.

Can someone remove the printing and copying restrictions?

Yes. Restrictions are a flag in the file that well-behaved PDF apps respect, but anyone who can open the document can remove them with free tools - our own Unlock PDF does it without asking for a password. They stop casual printing or copying, nothing more. If people must not read the document at all, the open password is what protects it.

What is the difference between the open password and the permissions password?

The open password (sometimes called the user password) is needed to view the file. The permissions password (owner password) is only needed to change the restrictions in apps that obey them. They must be different: if they are the same, anyone who can open the file also has the rights to lift the restrictions. When you leave the permissions password empty, a random one is made, and shown to you if you set restrictions.

What can still be seen in an encrypted PDF?

Encryption covers the text, images and metadata, but not the file's outer structure. In many files - especially those printed from a browser or saved from Word - the page count, page sizes and font names stay readable because they sit outside the encrypted parts. This tool packs them inside the encryption. What no PDF encryption can hide is the file size and the pixel dimensions of images, and the tool tells you when a file contains images.

Will the protected PDF open on my recipient's phone?

Yes. The form of AES-256 used here arrived with Adobe Acrobat X in 2010 and became part of the PDF 2.0 standard in 2017, so current viewers open it: Adobe Acrobat and Reader, the PDF viewers built into Chrome, Edge, Firefox and Safari, Preview on Mac, and the usual PDF apps on iPhone and Android. Only software from before about 2010 may refuse it.

Is my file or password sent anywhere?

No. The encryption runs in your browser using qpdf compiled to WebAssembly. Neither the document nor the password leaves your device, and nothing is stored after you close the page.

I forgot the password. Can you recover it?

No, and nobody else can either - that is the point of the encryption. Keep an unprotected copy somewhere safe, or store the password in a password manager, before you delete the original.