How to Protect a PDF with a Password (2026 Guide)

Why Password-Protect a PDF?

You're sending a contract to a client. A tax return to your accountant. A medical release to a specialist. An unpublished manuscript to an editor. Once that file leaves your device, you lose control — unless you encrypt it.

Password protection (encryption) ensures:

• Only people with the password can open it (open password)
• Even if opened, recipients can't print, copy, or modify without a second password (permissions password)
• The file is mathematically unreadable without the key — AES-256 encryption

Our Protect PDF tool does this client-side. Your document never uploads. The encryption happens in your browser. Not even we can decrypt it.

Two Password Types: Open vs Permissions

Open Password (User Password)

Required to open the PDF. Without it, the file is unreadable — viewers show a password prompt, content is encrypted. This is your first line of defense.

• Use when: sending confidential data over email, cloud storage, or any untrusted channel
• Share the password via a different channel (Signal, phone call, in-person)
• Without this, anyone with the file can open it

Permissions Password (Owner Password)

Required to change permissions (print, copy, modify, annotate). The file opens without it — but restricted actions are blocked. This is your control layer.

• Use when: you want recipients to view but not edit/print/copy
• Common: "View only" contracts, internal memos, exam papers
• Note: Permissions are enforced by compliant viewers (Acrobat, most readers). Non-compliant tools may ignore them. The open password is cryptographically enforced; permissions are honor-system.

Use Both for Maximum Control

Open password = "You can't see this without the key."
Permissions password = "You can see this, but you can't print/copy/edit it."
Together: "You can't see this without key A. If you have key A, you still can't print/copy/edit without key B."

How to Protect a PDF Online

Step-by-step with Protect PDF

1. Open onlinepdfeditors.com/protect-pdf
2. Drag your PDF in (or click to browse)
3. Set Open Password (optional but recommended):
   • Enter a strong password (12+ chars, mixed case, numbers, symbols)
   • Confirm
4. Set Permissions Password (optional):
   • Enter a different password from open password
   • Confirm
5. Choose Permissions (if permissions password set):
   • Printing: None / Low Resolution (150 DPI) / High Resolution
   • Copying: Allow / Deny
   • Modification: Allow / Deny / Allow Annotations Only / Allow Form Filling Only
   • Content Extraction: Allow / Deny (for accessibility)
6. Click Protect PDF
7. Download the encrypted file

Zero upload. AES-256 encryption runs in your browser via WebAssembly. The unencrypted original never leaves your memory.

Encryption Details: AES-256

We use PDF 2.0 standard encryption: AES-256 in CBC mode with a 256-bit key derived from your password via PBKDF2 (HMAC-SHA256, 64000 iterations). This is the current gold standard for PDF encryption.

• Algorithm: AES-256-CBC
• Key derivation: PBKDF2-HMAC-SHA256, 64000 iterations
• Standard: ISO 32000-2 (PDF 2.0) ExtensionLevel 3
• Viewer compatibility: Acrobat Reader DC+, Chrome, Edge, Firefox, Safari, most PDF viewers

Older viewers (pre-2015) may not support AES-256. If you need legacy compatibility, you'd need RC4 128-bit (deprecated, insecure) — we don't offer it. Use a modern viewer.

Permission Settings Explained

{`// Permission Options in Protect PDF

| Permission          | Options                          | What It Controls                     |
|---------------------|----------------------------------|--------------------------------------|
| Printing            | None / Low Res (150 DPI) / High  | Can recipient print? At what quality?|
| Copying             | Allow / Deny                     | Can recipient copy text/images?      |
| Modification        | Allow / Deny / Annotations Only  | Can recipient edit? Add notes?       |
|                     | / Form Filling Only              |                                      |
| Content Extraction  | Allow / Deny                     | Screen readers, accessibility tools  |`}

Common Presets

• Confidential — View Only: Open password + Permissions password. Printing: None. Copying: Deny. Modification: Deny. Extraction: Deny.
• Review Copy — Comment Only: Open password + Permissions password. Printing: Low Res. Copying: Deny. Modification: Annotations Only.
• Form — Fill Only: Open password (optional) + Permissions password. Printing: High Res. Copying: Deny. Modification: Form Filling Only.
• Internal — No Copy/Print: Open password + Permissions password. Printing: None. Copying: Deny. Modification: Deny.

Best Practices

• Use different passwords for open and permissions. If one leaks, the other still protects.
• Share passwords out-of-band — never in the same email as the PDF. Signal, phone, password manager share.
• Store passwords in a password manager — Bitwarden, 1Password, KeePass. Don't lose them. No backdoor exists.
• Test before sending — open the protected file yourself. Verify restrictions work.
• Keep the unencrypted original — our tool never overwrites your source. But you should back it up too.
• For highly sensitive data — consider also watermarking (Watermark PDF) with recipient name/email for traceability.

FAQ

How do I password protect a PDF for free?

Open onlinepdfeditors.com/protect-pdf. Drag file. Set passwords. Download. Free, no limits, no account, no upload.

What's the difference between open password and permissions password?

Open password = required to view the file. Permissions password = required to change restrictions (print, copy, edit). Open is cryptographic; permissions are viewer-enforced.

Can I remove a password from a PDF?

If you know the permissions password, yes — Unlock PDF removes it. If you only know the open password, you can open but not remove permissions. If you know neither: no (and we don't crack passwords).

Is AES-256 encryption secure?

Yes. AES-256 is the global standard for symmetric encryption. No practical attacks exist. The weak link is always the password — use a strong one (12+ chars, random).

Can I password protect a PDF on my phone?

Yes. onlinepdfeditors.com/protect-pdf works in mobile Safari/Chrome. Touch-friendly password fields.

What happens if I forget the password?

The file is permanently unreadable. No backdoor. No recovery. No "forgot password" — that would defeat encryption. Keep passwords in a password manager.

Can I protect a PDF without uploading it?

Yes — that's exactly what our client-side tool does. Encryption happens in your browser. Zero upload.

Can I set different permissions for different people?

Not with standard PDF encryption (single permissions password). For per-recipient control: create separate protected copies with different permissions passwords, or use a DRM/IRM solution (expensive, enterprise).

Ready to secure your PDF? Open Protect PDF — set passwords, choose permissions, download. AES-256. Free. Private. No upload.