How to password protect a PDF
- 1.
Open the PDF
Drop the document onto the area above or choose it from your device. If the file already has a password, enter it and the new one will replace the old one.
- 2.
Set the open password
Type the password twice or click "Generate a strong password". A bar shows a rough password strength. Save the password before you go on.
- 3.
Choose locks (optional)
You can block printing, copying and editing. Keep in mind that these are flags in the file, not a hard security measure.
- 4.
Protect and download
The tool encrypts the file and checks the result: the file must not open without the password, and with it the page count must match. Then you download the protected PDF.
Open password versus permission locks
These are two different protections, and only one of them protects the content.
| Open password | Print, copy and edit locks | |
|---|---|---|
| What it does | Encrypts the content, so the file will not open without the password | Stores flags in the file saying what a program should not do |
| What enforces it | The AES-256 encryption itself | The goodwill of the program that opens the file |
| Can it be removed | Not without the password (short of guessing it) | Yes, anyone can strip them from the file, including with Unlock PDF on this site |
Most PDF programs respect the locks, but there is no guarantee that every one does, and a screenshot is always possible. If the confidentiality of a document matters, rely on the open password and treat the locks as an extra that discourages accidental copying or changes.
Choosing a password
AES-256 is strong, so the password becomes the weakest link. A short or common password can be guessed no matter how strong the encryption is.
- Use a long password of random characters, such as the 20-character one from the "Generate a strong password" button, or several randomly chosen words.
- Avoid names, birthdays and passwords reused from other accounts.
- Send the password by a different route than the file, for example by text message or phone, not in the same email.
- Keep the password in a password manager. A lost password cannot be recovered, and without it the file cannot be opened.
A password can be up to 127 bytes, and accented letters take 2 bytes each. It cannot start with @ or "--". Some older programs do not recognize characters outside the basic set, so the tool warns you when you use them.
What to do with the file before protecting it
A file with a password will not open in other PDF tools until you supply the password, so make every change first: merge files, sign the document, add a watermark or reduce the size.
The protected file is a new version of the document: the pages, text and images are the same, but digital signatures in the original may stop being valid. Keep the original in case you lose the password.
Will the recipient be able to open it
Modern PDF programs, including browsers and viewers on computers and phones, support AES-256 encryption. Older or simplified programs may not. For an important delivery, ask the recipient to try opening the file.
Frequently asked questions
Is AES-256 encryption in a PDF secure?
+
What if I forget the password of a protected PDF?
+
Does blocking printing and copying really protect the file?
+
Are my file and password sent to a server?
+
Can I protect a PDF that already has a password?
+
Can the password contain accented letters?
+
Do screen readers still work on a file with locks?
+
Updated: