How to Password Protect a PDF — Free, No Upload Required

Password protecting a PDF is one of the most common document security tasks — whether you are sending a contract, a payslip, or a confidential report. PDF supports two distinct types of protection, and understanding the difference matters for both security and usability.

Two types of PDF password

Open password (User password). The recipient must enter this password just to open the file. Without it, the PDF is completely inaccessible. Use this when the document itself must stay confidential.

Permissions password (Owner password). The PDF opens without a password, but certain actions are restricted — printing, copying text, editing, or extracting pages. Use this when you want the document to be readable but not reproducible.

You can apply both simultaneously: require a password to open, and then restrict what the recipient can do once inside.

What encryption standard is used?

Modern PDF password protection uses 256-bit AES encryption (AES-256), the same standard used by banks and governments. If someone does not have the password, brute-forcing a 256-bit AES-encrypted PDF is computationally infeasible with current technology.

Older PDFs encrypted with 40-bit or 128-bit RC4 (common in PDFs made before 2010) are considerably weaker. If you are protecting a sensitive document, ensure you are using AES-256, not RC4. The browser tool linked below uses AES-256.

PDF permissions in detail

When you set a permissions password, you can independently control each of the following:

• Printing — none, low-resolution only, or high-resolution
• Copying text and images — enable or disable
• Editing — filling forms only, commenting only, full editing, or none
• Page extraction — prevent recipients from pulling individual pages out

How to password protect a PDF in the browser

Using the PDF Password Protect tool on this site:

1. Upload your PDF by clicking the drop zone or dragging the file in
2. Enter a user password (required to open), owner password, or both
3. Set permission restrictions if needed
4. Click Protect — the encrypted PDF is generated and downloaded locally

The entire process happens in your browser. The original file and the password are never sent to any server.

How to remove a PDF password

If you know the password, removing it is straightforward — upload the protected PDF to the PDF Unlock tool, enter the password, and download an unprotected version.

If you do not know the password to a PDF you own, your options depend on the encryption strength. Older RC4-encrypted PDFs can sometimes be unlocked with commercial tools. AES-256 encrypted PDFs without the password are effectively unrecoverable with current technology — store passwords in a password manager.

Limitations of PDF password protection

PDF encryption protects the content from being accessed without the password. It does not prevent:

• A recipient who knows the password from sharing it
• Screenshots of content (even with copy restrictions enabled)
• A recipient printing to a new PDF, which creates an unprotected copy

For documents requiring stricter access control, consider enterprise digital rights management (DRM) solutions, which can revoke access remotely and track document activity. PDF passwords are a reasonable barrier for standard confidential documents but not a complete content control system.

Frequently asked questions

Can I password protect a PDF without Adobe Acrobat?

Yes. The browser tool linked above requires no software installation or account. Adobe Acrobat is not needed. The same AES-256 encryption standard is used regardless of which tool you use.

Can the recipient remove the password after I send the PDF?

If the recipient has your open password, they can use a PDF unlock tool to create an unprotected copy. PDF passwords control access to the file, not what the authorised recipient does with it afterwards. For higher control, use digital rights management software.

Does password protecting a PDF increase the file size?

Slightly. AES-256 encryption adds a small overhead (typically a few kilobytes) but does not meaningfully increase file size. Compression and encryption are independent operations — compress the PDF first, then encrypt it.