How to Password Protect a PDF (and What the Protection Actually Does)

You are emailing a contract, a payroll summary, or a set of medical records. Adding a password feels like the responsible thing to do — and it is, provided you understand what the password is protecting you against. PDF security is genuinely strong in one place and essentially decorative in another, and the two look almost identical in the dialog box.

The two kinds of PDF password

The user password: real encryption

Also called the open password or document open password. Set one and the file's contents are encrypted with AES. Without the password, a viewer cannot render a single page — there is nothing to render, just ciphertext. This is not a permission check that software chooses to honour; the bytes are genuinely unreadable.

This is the protection worth relying on. Its strength depends entirely on the password you choose, because an attacker's only route in is guessing. Modern PDF encryption (AES-256, PDF 2.0) with a strong passphrase is not something anyone brute-forces.

The owner password: a request, not a lock

Also called the permissions password. It sets flags saying "do not allow printing", "do not allow copying text", "do not allow editing". The document still opens for anyone with no password at all. Those flags are instructions to the PDF viewer, and honouring them is a matter of the viewer's manners.

Adobe Acrobat and most mainstream readers do honour them. Plenty of other software does not, and the flags can be stripped by anyone who cares to. Treat permission restrictions as a way to stop honest people from doing the wrong thing by accident — a speed bump, not a gate.

Adding protection to a PDF

1. 1Open Protect PDF and add your file

   Go to Protect PDF. The encryption happens in your browser, which matters more here than anywhere else on the site — a tool that uploaded the file would see both the document and the password you typed.

2. 2Set an open password if the contents are confidential

   Enter it twice. This is the one that actually encrypts the file. Leave it blank if you only want permission restrictions.

3. 3Choose which permissions to allow

   Printing, high-resolution printing, copying, editing, annotating, form filling, and document assembly can each be turned off independently. Restricting anything generates an owner password automatically, so the restrictions are properly attached to the file.

4. 4Download and — this is the important bit — test it

   Open the protected file in a different application from the one you made it in. Confirm it asks for the password and that the password works. A protected file you cannot open is worse than an unprotected one.

Choosing a password that is worth setting

Encryption strength is not the weak link; password choice is. Everything an attacker tries is a guess, so make guessing expensive:

• Use a passphrase, not a password. Four unrelated words — harbour-tulip-cassette-nine — beat Tr0ub4dor&3 on both strength and memorability.
• Never use the recipient's data as the password. Date of birth, employee number, and last four digits of an account are conventions in some industries and they are terrible: the people most likely to intercept the document are exactly the people who already know those numbers.
• Do not send the password in the same email as the file. An email with both attached is a document with a password written on the front. Send the file by email and the password by text message, phone call, or a separate channel.
• Use a different password per recipient if you are sending the same sensitive document to several people, so a leak is traceable and revocable in principle.
• Write it down somewhere you will find it. There is no recovery mechanism. None. See below.

There is no "forgot password" for a PDF

This is the part people learn the hard way. An encrypted PDF has no account, no server, no reset link, and nobody who can help you. The key is derived from the password itself, so if the password is gone, the content is gone. Services claiming to "recover" PDF passwords are running dictionary and brute-force attacks; against a weak password they sometimes work, and against a strong passphrase they will not.

Before you encrypt something you will need in five years — an archived contract, a set of records — put the password in a password manager under an entry that names the file. Encrypting a document you then cannot open is a self-inflicted data loss.

Removing a password you own

Protection gets in the way as often as it helps. Once a contract is signed and archived internally, or once you need to compress or merge the file, the encryption has to come off — most editing tools cannot touch an encrypted document at all.

Unlock PDF takes a password you already have and produces a decrypted copy. It is not a cracking tool: you supply the correct password, it decrypts with it. That is the only legitimate way to do this, and removing protection from documents you are not authorised to open is unlawful in most jurisdictions regardless of the technique.

Some files are encrypted with a blank user password and only carry permission flags. Those open normally in any reader but refuse to be edited. Unlocking them removes the restriction without needing any password, because there was never one protecting the content.

What a password does not protect you from

Encryption controls access to the file, and that is all. Once someone legitimately opens it, they can screenshot every page, retype the contents, or forward the decrypted copy to anyone. There is no PDF feature that prevents that, and any product claiming otherwise is selling DRM that also does not prevent it.

For discouraging redistribution, a visible watermark carrying the recipient's name is more effective than any permission flag — not because it prevents copying, but because it makes a leaked copy trace back to whoever leaked it. Combining a strong open password with a personalised watermark covers both the technical and the social side of the problem.