How to Password Protect a PDF File (And When to Do It)
Sensitive documents like contracts, payslips, and medical records should be password protected. Learn the right way to add security to PDF files and what it actually protects.
Contracts, payslips, medical records, confidential reports — some PDFs should not be readable by just anyone who finds the file. Password protection adds a layer of access control. Here's what it actually protects, and how to do it correctly.
Two Types of PDF Password Protection
- Open password (user password):Required to open the PDF at all. Without this password, the file appears blank or won't open. This is what most people mean when they say "password-protect a PDF."
- Permissions password (owner password): The file opens normally without a password, but certain actions are restricted — printing, copying text, editing, or filling forms. Primarily enforced by compliant PDF readers.
What PDF Password Protection Does NOT Do
It's important to understand the limits. A PDF password encrypts the file contents, but it does not prevent a determined person with the right tools from eventually cracking it — especially if the password is weak. Permissions passwords are also easily bypassed by many PDF tools.
Choosing a Strong Password
- Use at least 12 characters with a mix of uppercase, lowercase, numbers, symbols
- Avoid anything guessable (name, date, document title)
- Share the password through a separate, secure channel — not the same email as the PDF
AES-256 Encryption
Modern PDF password protection uses AES-256 encryption — the same standard used by banks and governments. When implemented correctly, this makes brute-forcing practically impossible with current technology, as long as you use a strong password.
Use our PDF tools to manage your PDF files securely in the browser.