How to Password Protect a PDF
Password protection prevents unauthorized people from opening, copying, or printing your PDF. Whether you're sending a contract to a client, sharing financial records, or archiving sensitive files, adding a password takes less than a minute with the right tool. Here are five free methods that work on any platform.
Why Password Protect a PDF?
An unprotected PDF is readable by anyone who has the file. If it ends up in the wrong inbox, on a shared drive, or in a data breach, all of its contents are exposed. Password protection adds a layer of encryption that makes the document unreadable without the correct password.
- Confidential documents. Financial statements, medical records, employee data, legal agreements, and business plans often contain information that should only be seen by specific people.
- Legal and regulatory compliance. Industries like healthcare (HIPAA), finance (SOX, GDPR), and law often require documents to be encrypted in transit and at rest. Password-protecting PDFs is one of the simplest ways to meet these requirements.
- Controlling access when sharing. When you email a PDF to multiple recipients, you lose control of who sees it once it arrives. A password ensures that even if the email is forwarded, only people who know the password can view the document.
Types of PDF Protection
The PDF format supports two distinct types of password protection. Understanding the difference helps you choose the right level of security for your situation.
User password (open password): This prevents anyone from opening the PDF without entering the password. The entire document is encrypted, and without the password, the file is just unreadable data. This is the stronger option — use it when the document's contents are truly confidential.
Owner password (permissions password): This allows anyone to open and read the PDF, but restricts specific actions like printing, copying text, or editing the document. It's useful when you want people to view a document but not reproduce or modify it — for example, distributing a report that shouldn't be copied into other materials. Note that owner passwords are less secure than user passwords; some tools can remove permission restrictions without the password.
Many tools let you set both simultaneously: a user password to control who can open the file, and an owner password to control what they can do with it.
Method 1: Using Adobe Acrobat
Adobe Acrobat Pro is the most feature-complete option for PDF security, though it requires a paid subscription (roughly $20/month).
- Open your PDF in Adobe Acrobat Pro.
- Go to File > Protect Using Password (or Tools > Protect > Encrypt with Password).
- Choose whether to restrict viewing (user password) or editing (owner password), or both.
- Enter your password. Acrobat will rate its strength.
- Select the encryption level. AES-256 is the current standard — use it unless you have a specific reason to use an older encryption method.
- Click OK, then save the file.
Acrobat also allows you to set granular permissions: allow printing but prevent copying, allow form filling but prevent page extraction, and so on. If you need fine-grained control over document permissions, Acrobat is the most capable tool.
Method 2: Using LibreOffice (Free, Open Source)
LibreOffice is completely free and works on Windows, macOS, and Linux. It can add password protection when exporting a document to PDF.
- Open your document in LibreOffice (Writer, Draw, or Impress — whichever matches your file type). If you already have a PDF, open it in LibreOffice Draw.
- Go to File > Export as PDF.
- In the PDF Options dialog, click the Security tab.
- Click Set Passwords. You can set an open password, a permissions password, or both.
- Configure permission restrictions if desired (printing, copying, modifying).
- Click Export and choose a save location.
This is the best free desktop option for password protection. LibreOffice supports AES-128 encryption, which is strong enough for most purposes. The main downside is that opening complex PDFs in LibreOffice Draw may alter some formatting.
Method 3: Using Preview on Mac
If you're on macOS, the built-in Preview app can add password protection to any PDF without installing additional software.
- Open the PDF in Preview.
- Go to File > Export (not “Save”).
- Check the Encrypt checkbox at the bottom of the export dialog.
- Enter and verify your password.
- Click Save.
Preview's password protection is straightforward but limited. It only supports a user password (preventing opening). You can't set separate owner permissions or choose the encryption level. For simple “lock this file with a password” needs, it's quick and effective.
Method 4: Using Microsoft Word
Microsoft Word can save documents as password-protected PDFs, which is useful if your document originates in Word.
- Open your document in Microsoft Word.
- Go to File > Save As (or Export > Create PDF/XPS).
- Choose PDF as the file type.
- Click Options and check Encrypt the document with a password.
- Enter your password and click OK.
- Click Save.
This method is convenient when you're already working in Word. However, it only adds an open password — you can't set separate owner permissions. Also, this feature is available in the desktop version of Word, not the free web version.
Method 5: Using Online Tools
Several online services offer PDF password protection, including Smallpdf, iLovePDF, and others. These tools work in any browser without installing software. However, there's an important privacy consideration.
Your file gets uploaded to a remote server.When you use a server-based online tool to encrypt a PDF, the unencrypted version of your document passes through someone else's infrastructure before the password is applied. This defeats much of the purpose of password protection if the document is sensitive. The services claim to delete files after processing, but you're trusting their word and their security practices.
If the document isn't sensitive — for example, you're password-protecting a shared album of vacation photos — an online tool is fine. For contracts, financial data, medical records, or anything confidential, use one of the offline methods above instead.
Need more advanced features?
Adobe Acrobat Pro
Advanced editing, OCR, e-signatures, and batch processing
How Strong Should Your PDF Password Be?
The encryption is only as strong as the password protecting it. A weak password can be cracked in seconds by brute-force tools, rendering the encryption meaningless.
- Length matters most. Aim for at least 12 characters. Every additional character exponentially increases the time needed to crack the password. A 16-character password is orders of magnitude stronger than an 8-character one.
- Mix character types. Use uppercase letters, lowercase letters, numbers, and symbols. “Tr33$_in_March!” is far stronger than “password123.”
- Avoid dictionary words and patterns. Password-cracking tools try common words, phrases, and keyboard patterns first. “qwerty,” “123456,” and “password” are among the first things they try.
- Use a passphrase. A string of random words like “correct-horse-battery-staple” is both strong and memorable. Add a number and a symbol to make it even stronger.
- Share the password separately. Never include the password in the same email as the PDF. Send it via a different channel — a text message, a phone call, or a separate email. If the email is intercepted, the attacker won't have both the file and the key.
Additional Ways to Protect PDF Content
Password protection controls who can access the entire document. But sometimes you need more targeted protection:
Redact sensitive information. If only parts of a document are confidential — Social Security numbers, account numbers, names in a legal document — you can permanently remove that content while sharing the rest. The Redact PDF tool blacks out selected areas so the underlying text is completely removed, not just hidden.
Add a watermark for tracking. Watermarks like “CONFIDENTIAL” or a recipient's name help deter unauthorized sharing and track the source if a document leaks. The Add Watermark tool places customizable text across every page of your PDF.
Sign the document. A digital signature using the Sign PDF tool confirms the document's authenticity and shows whether it has been tampered with after signing. This doesn't prevent access but does verify integrity.
Frequently Asked Questions
Can a password-protected PDF be cracked?
Technically, yes — any encryption can be cracked given enough time and computing power. However, a PDF encrypted with AES-256 and a strong password (12+ characters, mixed types) would take billions of years to crack with current technology. The practical risk is negligible for a well-chosen password. Weak passwords like “1234” or “password” can be cracked in seconds.
What happens if I forget the password?
If you set a user password (open password) and forget it, the document is effectively locked permanently. There is no backdoor or “forgot password” recovery for encrypted PDFs. Some third-party tools claim to remove PDF passwords, but they only work on weak owner passwords (permission restrictions), not on strong open passwords with modern encryption.
Does password protection affect the file size?
Barely. Encryption adds a tiny amount of overhead — typically a few kilobytes regardless of the document size. A 5 MB PDF will still be approximately 5 MB after encryption. You won't notice any difference in file size or loading speed.
Can I remove a password from a PDF later?
Yes, if you know the password. Open the protected PDF, enter the password, and then save or export it without encryption. In Adobe Acrobat, go to File > Properties > Security and change the security method to “No Security.” In Preview on Mac, use File > Export and uncheck the Encrypt box. This gives you an unprotected copy.