How to Password Protect a PDF (and Remove a Password You Know)

Password-protecting a PDF encrypts it so it can't be opened without the password. It is the right move for anything you would rather not have readable if the file is forwarded, leaked from an inbox, or left on a shared computer: contracts, payslips, medical records, tax documents and bank statements. This guide explains what PDF protection actually does, the difference between the two kinds of password, how to add or remove protection, and the habits that decide whether it protects anything at all.

What PDF protection actually does

A protected PDF is encrypted, not just "locked". Without the password, the content is scrambled data: a viewer can't display it, text can't be extracted, and search indexes can't read it. Modern PDFs use AES encryption, the same family of algorithms banks and governments rely on.

That is very different from the other ways people "secure" PDFs:

• A watermark is a visible label. It discourages misuse but protects nothing.
• Permission flags ("no printing", "no copying") ask viewer software to behave. Most respect them; some don't.
• Encryption with an open password is the only one of these that actually stops someone without the password from reading the file.

Open password vs permissions password

• The open password (sometimes called the user password) is required to open the document at all. This is the one that provides confidentiality.
• Permission restrictions apply after the document is opened, for example disabling printing or copying text. They rely on the viewer's cooperation, so treat them as friction against casual misuse rather than real security.

The open password is the one that matters, and it is what the tool below sets.

How to protect a PDF

1. Open the Protect PDF tool and add your file.
2. Choose a strong password. The encryption is only as good as the password: a short or guessable one can be cracked by automated tools in minutes. The Password Generator makes a good one.
3. Download the encrypted copy and share it.

Encryption happens in your browser with AES-256. The file and the password never leave your device, which is exactly what you want for a document sensitive enough to need a password.

Choosing the password

A PDF password faces a tougher attack than a website password. Anyone who has the file can try billions of guesses offline, with no lockout after five attempts. So:

• Use at least 12–16 random characters, or a passphrase of five or six random words.
• Never use the recipient's date of birth, phone number or name. That is the first thing anyone, including an attacker who knows them, would try.
• Use a different password for each document or recipient, so one leak doesn't unlock everything.

Banks often protect statements with a password built from your name and date of birth. That is convenient, but weak for exactly this reason. Treat those files as lightly protected.

Share the password the right way

Send the password through a different channel from the file. If the PDF goes by email, send the password by text message, a messaging app or a phone call. If both travel in the same email, anyone who gets into that inbox gets both, and the protection is theatre. For files you send regularly to the same person, agree a password once, in person or by phone.

Removing a password you know

The reverse job comes up just as often. A bank statement or payslip arrives protected, and you need a clean copy for your own records, or an application portal won't accept protected files.

1. Open the Unlock PDF tool and add the file.
2. Enter the password once.
3. Download an unencrypted copy that opens without a password, with printing and copying available.

Unlocking also runs in your browser. It is for files you are authorised to open: you must know the password, and it isn't a tool for breaking into documents that aren't yours.

Protecting PDFs you create

When converting a Word document, the Word to PDF tool can encrypt the PDF with AES-256 in the same step, so there is never an unprotected copy to forget about. To protect several documents together, merge them first and protect the combined file once.

What protection doesn't do

• It doesn't protect against the recipient. Anyone with the password can open the file, take screenshots, or print it and scan it. Encryption controls who can open it, not what they do afterwards.
• It doesn't hide the file's existence or name. A file called Salary-Revision-2026-Asha.pdf reveals something on its own. Use neutral file names for sensitive documents.
• It doesn't redact. If some information shouldn't reach the recipient at all, remove it before sending. Don't rely on permissions.

One warning: there is no "forgot password"

Real encryption means nobody can recover a lost password, including us and any "recovery" service working on a strong password. If you protect a file and lose the password, the content is gone for practical purposes. Keep an unprotected original stored safely, and treat the protected copy as the one that travels.

Frequently asked questions

How strong is PDF password protection?

AES-256 encryption itself is effectively unbreakable. The weak point is always the password: a long random one makes the file practically impenetrable; a short one doesn't.

Will the recipient need special software?

No. Every standard PDF viewer, including browsers, Adobe Reader, Preview on Mac, and phone apps, asks for the password and opens the file.

Can I protect a PDF on my phone?

Yes. The tool works in mobile browsers, and the encryption runs on the phone itself.

Does protecting a PDF change its contents?

No. Pages, text and images are identical once opened. Only the access to them changes.