How Do I Password Protect a PDF?

How do I add a password to a PDF?

Upload your file to Protect PDF and type the password you want people to use when opening it. The tool encrypts the whole document and hands you back a protected copy in seconds.

• Pick a password with at least 12 characters, mixing letters, numbers and a symbol. Don't reuse one from your email or bank account.
• Share the password through a different channel than the file itself, like a text message instead of the same email.
• Open the protected file yourself first, to check it actually asks for the password before you send it on.
• Keep an unprotected copy somewhere safe too, in case you need to edit the file later without typing a password every time.

What's the difference between an open password and a permissions-only lock?

An open password stops anyone from viewing the file until they type it in. A permissions-only lock lets the file open freely but tries to block things like printing, and it's much easier to get around.

• Open password: also called a user password, this is what Protect PDF sets. Nothing inside the file can be read without it.
• Permissions-only lock: some other software adds this instead. The content is fully readable, and only certain actions are supposed to be blocked.
• Why it's weak: permissions are enforced by the PDF reader, not by encryption, so plenty of software just ignores them.
• If a file opens with no password but printing feels blocked, that's a permissions-only lock, and Unlock PDF removes it automatically.

How strong is AES-256 password protection?

Very strong, as long as the password itself is hard to guess. AES-256 became the standard PDF encryption method with PDF 2.0, after AES-128 arrived earlier in PDF 1.6.

• Guessing a long, random AES-256 password by brute force would take far longer than anyone could realistically wait for.
• A weak password undoes it. 'password1' can be guessed in moments, whatever encryption sits behind it.
• Protect PDF encrypts the whole document with one password, and anyone who has it gets full access, so there's no weaker setting hiding underneath.
• Older PDFs sometimes carry 40-bit or 128-bit RC4 encryption instead, which modern tools can crack quickly. AES-256 doesn't have that problem.

What if I forget my PDF's password?

There's no built-in way to recover it. If the file is genuinely encrypted, guessing is the only option, and a strong password makes that impractical.

• Check a password manager or your notes first. Most forgotten passwords turn up there rather than needing any special tool.
• If you still have the original file, make a fresh protected copy with Protect PDF and pick a password you'll actually remember.
• Unlock PDF can remove a password, but only once you enter the current one. It can't guess or bypass it.
• Write new passwords down somewhere safe the moment you set them, rather than trusting your memory.

Will the password protected PDF still open for the person I send it to?

Yes, as long as they know the password. AES-256 encrypted PDFs open in any current PDF reader, including the ones built into browsers and phones.

• Desktop and mobile readers all support it. Adobe Acrobat Reader, browser PDF viewers and phone preview apps all ask for the password and open the file the same way.
• Very old software can struggle. Readers from before around 2008 may not support AES-256, though that's rare to run into now.
• A password doesn't stop someone photographing or screenshotting the file once it's open. It only blocks people who don't have the password at all.

Why might an email filter block a password-protected PDF?

Because scammers use them too. A scanner can't look inside a locked file, so some mail systems hold back every encrypted attachment.

• January 2026: the security firm Ironscales described scam emails with a locked PDF and its password printed in the email, so no scanner could check the link inside.
• April and May 2026: another campaign sent locked PDFs dressed up as legal notices, to take over Microsoft 365 accounts.
• What this means for you: some work email systems quarantine any encrypted attachment. Tell the person it's coming, or share a download link instead.
• Keep the password out of the email: it makes the lock pointless, and it looks exactly like these scams.

Try the tools

Try it on your own file. The tools are free and you don't need an account.