Contracts with bank details, passport scans, medical reports, payroll sheets, price proposals — we send documents like these by email and messenger every day and keep them in the cloud and on USB drives. Rarely do we think about what happens if a message goes to the wrong person, a drive is lost or someone gets into a cloud account. The simplest way to reduce that risk is to password protect the PDF.
This guide shows how to encrypt a PDF in a minute with our free Protect PDF tool, explains the types of PDF passwords and encryption levels, what a password does and doesn't protect, how to do the same in Word, Acrobat, LibreOffice, on Mac and from the command line, and the most common mistakes.
Quick answer: how to password protect a PDF online
- Open Protect PDF and upload your file (up to 100 MB).
- Choose a password of 4 to 128 characters — ideally 12+ with letters, digits and symbols.
- Click Protect PDF and download the encrypted file.
- Check that it opens with your password, and share the password separately from the file.
Free, no registration, no watermarks. A forgotten password cannot be recovered — save it.
Types of PDF passwords
Open password (user password)
Without it the document won't open at all: any viewer shows a password prompt, and the content stays inaccessible until the right password is entered. This is real encryption, not a lock in the user interface — text, images and other data are stored encrypted, and the key is derived from the password. This is the password our tool sets.
Owner password (permissions password)
The owner password controls restrictions: printing, copying text, editing, filling forms, extracting pages. A document with only an owner password opens without any password, and the restrictions are honored only because the viewer chooses to honor them. Many programs ignore them, so they should not be relied on to protect confidential data. Think of them as a polite request from the author rather than a barrier.
| Open password | Owner password | |
|---|---|---|
| What it does | Prevents opening and reading the file | Restricts printing, copying, editing |
| Needed to view | Yes | No |
| Strength | Depends on encryption and password quality | Low, easily bypassed |
PDF encryption levels, honestly
| Algorithm | PDF version | Assessment today |
|---|---|---|
| RC4, 40-bit | PDF 1.1–1.3 | Obsolete. A key that short can be brute-forced directly regardless of the password |
| RC4, 128-bit | PDF 1.4 | Maximum compatibility. The key itself can't be brute-forced; strength depends on the password; RC4 is considered outdated |
| AES, 128-bit | PDF 1.6 | Modern, strong cipher, supported almost everywhere |
| AES, 256-bit | PDF 1.7 ext. 3 and PDF 2.0 | Strongest option, for highly sensitive data |
Our tool uses 128-bit encryption with the standard PDF security handler, revision 3. That is a deliberate choice for compatibility: the file opens in any version of Acrobat Reader, every browser, Preview on Mac, Android and iPhone apps, and old office software. For everyday documents — contracts, ID scans, certificates, reports — it is sufficient as long as the password is long and complex. For truly critical data, use AES-256 via Adobe Acrobat Pro or qpdf (see below), and consider an encrypted archive or a secure transfer channel on top.
Why password strength matters most
With a 128-bit key or longer, attackers don't brute-force the key — that's infeasible. They guess passwords: dictionaries, dates, names, keyboard patterns, then every combination of increasing length, using GPUs that test huge numbers of candidates per second. “1234” or “smith2026” falls in seconds under any algorithm; a random 12–16 character password with mixed character types is practically out of reach.
What a password does and doesn't protect
It protects the content from anyone who gets the file without the password — a mistyped email address, a leaked mailbox, a lost USB drive or laptop — and from casual viewing on a shared computer.
It doesn't protect against a recipient who knows the password (they can save an unprotected copy, print, screenshot or forward it), against guessing a weak password, against malware on the device where the password is typed, or hide the file's existence, name and size. Don't name the file “John_Smith_passport_number.pdf”.
How to password protect a PDF online, step by step
- Prepare the document. Make sure it is the final version. If it's large, shrink it first with Compress PDF — the upload limit is 100 MB.
- Upload the PDF by dragging it into the upload area or selecting it.
- Create a password of 4 to 128 characters; we recommend at least 12 with upper and lowercase letters, digits and symbols. A passphrase of several unrelated words with digits and symbols works well.
- Save the password in a password manager before clicking the button. We cannot recover a forgotten password.
- Click Protect PDF. Encryption usually takes a few seconds.
- Download and test: the viewer should ask for a password and open the document with yours.
- Share the password separately — email the file, give the password by phone, SMS or another messenger.
If the document consists of several files, combine them with Merge PDF first and protect the result with one password.
Other ways to password protect a PDF
Adobe Acrobat Pro
Use Protect → Protect Using Password, or Encrypt → Encrypt with Password. You can set open and owner passwords and choose compatibility up to AES-256. Pros: full control, strongest encryption. Cons: paid subscription; free Acrobat Reader can't add passwords.
Microsoft Word when saving to PDF
File → Save As → PDF → Options → check “Encrypt the document with a password”. Pros: nothing extra to install if you have Word. Cons: works only for documents you save from Word, not existing PDFs; not available in every version and platform.
LibreOffice
File → Export as PDF → Security tab → Set Passwords. Pros: free, cross-platform. Cons: intended for documents you export from LibreOffice.
macOS Preview
File → Export, then enable encryption (in newer versions via Permissions) and set a password. Pros: built in. Cons: Mac only, few options.
Command line: qpdf and Ghostscript
qpdf supports AES-256:
qpdf --encrypt "OpenPassword" "OwnerPassword" 256 -- input.pdf protected.pdf
Ghostscript can also produce an encrypted file:
gs -sDEVICE=pdfwrite -o protected.pdf -sUserPassword=OpenPassword -sOwnerPassword=OwnerPassword -dEncryptionR=3 -dKeyLength=128 input.pdf
Pros: free, scriptable, qpdf offers AES-256. Cons: installation required; a password typed in a command may be saved in shell history.
Mobile apps
Many Android and iOS PDF editors can add passwords, often only in paid tiers. Alternatively, open our PDF protection tool in a mobile browser — it works the same as on desktop.
Comparison
| Method | Works on existing PDF | Encryption | Cost |
|---|---|---|---|
| Our online tool | Yes | 128-bit, maximum compatibility | Free |
| Adobe Acrobat Pro | Yes | Up to AES-256 | Subscription |
| Microsoft Word | No, only when saving from Word | Depends on version | Office license |
| LibreOffice | No, only on export | Depends on version | Free |
| qpdf | Yes | Up to AES-256 | Free |
Common problems and fixes
I forgot the password to my PDF
We can't recover it: the password isn't kept after processing, and we don't crack passwords. Find the unprotected original — which is why you should always keep one somewhere safe.
The recipient can't open the file
Check letter case, keyboard layout and stray spaces when copying. Unusual or non-Latin characters may be entered differently on other devices, so for documents leaving your organization a password of Latin letters, digits and common symbols is safer.
I need to change the password or edit the document
Unlock the PDF with the current password, make your changes (for example, reorder pages), then protect it again.
The file won't process
A damaged PDF may fail to encrypt — try Repair PDF first. If the file is already encrypted, remove the old protection first.
Security and privacy
- The password is never written to server logs.
- While the task is queued, the password is stored only in encrypted form and is erased right after processing.
- The original and encrypted PDFs are deleted automatically within 48 hours.
- Files are never published or tied to an account — no registration needed.
Frequently asked questions
How do I password protect a PDF for free?
Upload the file to Protect PDF, enter a password and download the result. Free, no registration, no watermarks.
Will the protected PDF open on a phone?
Yes. Built-in viewers on Android and iPhone, browsers and PDF apps support standard encryption and will ask for the password.
Which encryption does the service use?
128-bit encryption with the standard PDF security handler, revision 3 — chosen for maximum compatibility. Real-world strength depends mostly on password length and complexity.
Can I block printing or copying?
Our tool sets an open password, which genuinely protects the content. Owner-password restrictions are easily bypassed and add little confidentiality.
Do you see my password?
It is used only to encrypt the file, never logged, stored encrypted only while queued and erased right after processing.
How do I remove the password later?
Use Unlock PDF with the password you know.
Conclusion
An open password is a simple, effective way to keep a PDF's content away from prying eyes when sharing and storing it. Know its limits: encryption protects against people without the password, not against the recipient or a weak password. Choose a long unique password, store it safely and share it separately. For highly sensitive data, use AES-256 in professional software.
To protect a document now, open Protect PDF, upload your file, set a password and download the encrypted PDF — free and without registration.