How to password protect a PDF, and what a password can’t do
A password on a PDF encrypts the file: without the password its contents are unreadable. That is real protection for a file in an inbox or on a lost laptop, as long as the password is good and travels separately.
Updated
Two kinds of PDF password
A PDF can have a password to open it and a second one, the owner password, that only limits printing, copying or editing. They are very different in strength.
A password to open encrypts the content. A file with only an owner password opens for anyone, and its restrictions are a request to the reading app that many tools simply ignore or remove. If you need the content protected, it needs a password to open.
How to add a password without uploading the file
Sending a confidential file to a website so that it can be made confidential is backwards. Add password on this site encrypts the PDF in your browser: choose the file, type the password twice, download the protected copy. Neither the file nor the password leaves your device.
The copy is encrypted with AES-256 and checked before you get it. Your original stays as it is, so keep it if you may need an unprotected version, or delete it if you shouldn’t.
Choosing a password that holds
The encryption is strong; the password is the part that can be guessed. Programs that try thousands of passwords a second exist and are easy to get.
- Length beats cleverness: three or four unrelated words are far harder to guess than a short mix of symbols. Add password takes up to 32 characters, without accented letters.
- Don’t use a name, a date of birth, a tax number or anything the recipient list could guess.
- Send the password by a different route than the file: the PDF by email, the password by phone or a message.
- Write it down somewhere safe. A forgotten password can’t be reset; the file is lost.
What a password does not do
It does not control what a reader does after opening the file. Anyone with the password can print it, copy the text, save a copy without the password or pass both on.
It does not hide the file’s name or size, or the fact that it is encrypted. And it does not remove the author’s name and dates stored inside: clean those first if they matter.
Tools for this
Files are processed on this device and never uploaded.
Questions
- How strong is PDF password protection?
- With AES-256 the encryption itself is not the weak point. A file is as safe as its password is hard to guess.
- Can I open a PDF if I forgot the password?
- Not with this site, and not reliably with anything else. Tools that claim to recover passwords work by guessing, which only succeeds on weak ones.
- How do I remove a password from a PDF?
- If you know it, Remove password saves a copy that opens without it.
- Will a protected PDF open on a phone?
- Current PDF readers on phones and computers open AES-256 encrypted files and ask for the password. A very old reader may not; if a recipient can’t open the file, that is the first thing to check.
Related guides
- How to check if a PDF website uploads your file
- How to redact a PDF so the text is really gone
- Is iLovePDF safe?
- Is it safe to upload a PDF to an online tool?
- How to merge PDFs without uploading them
- PDF too large to email? What you can do
- PDF tools that work offline in your browser
- How to turn photos of a document into one PDF
- How to sign a PDF without creating an account or uploading it
- What a PDF reveals about you
- What does flattening a PDF mean?
- Which PDF sites upload your files?