How to Password Protect a PDF

Add a real password to a PDF with AES-256 encryption in seconds — free, online, no software. Here is how it works and when you actually need it.

By

Founder & Developer of PDFtoWord

Email isn’t private the way you might assume — a message can sit in a recipient’s inbox indefinitely, get forwarded without your knowledge, or land in the wrong address entirely. If a PDF contains anything sensitive — a contract, a tax document, medical records, salary details — a password is the one thing standing between “confidential” and “anyone who opens it.”

Go to the Lock PDF page and add the file you want to protect, up to 25 MB. Choose a password — the tool applies real AES-256 encryption, the same standard used for securing sensitive data generally, not a cosmetic lock that any PDF reader can bypass. Download your protected PDF, and from then on, opening it requires the password you set, in any PDF viewer, on any device.

A locked PDF this way is genuinely encrypted, not just flagged as protected. Without the correct password, the content is unreadable — there’s no “view without password” workaround built into the format. That’s different from, say, a Word document’s “restrict editing” feature, which only discourages casual changes rather than encrypting the file.

Choosing a password that actually protects the file comes down to three habits: length matters more than complexity, since a longer, memorable phrase resists guessing better than a short string of symbols; don’t reuse a password you use elsewhere, since if the PDF is ever shared, that password shouldn’t unlock anything else of yours; and send the password separately from the file — text it, or share it over a call, since emailing both together defeats the purpose. If both travel in the same email, anyone who intercepts the email has both halves.

If it’s your own file, you know the password, and you want to remove the lock going forward, use Unlock PDF to strip the protection once you’re done needing it. And keep in mind a password isn’t a label — encryption controls who can open a file, but says nothing about what the document is once it’s open, which matters when a reviewer can’t tell a draft from a final, or a shared copy shouldn’t be forwarded on. A “Draft” or “Confidential” watermark is the visible half of that, and the two are commonly used together — see How to Add a Watermark to a PDF Without Adobe.

This fits into bigger jobs too: protecting a whole collection rather than one file is covered in How to Build a Digital Document Archive for Your Family, and sending a deliverable to a paying client is covered in How to Send Documents Securely to Clients.

Going the other way: How to Remove a Password from a PDF for a file you can open, and Locked Out of Your Own PDF: What You Can (and Can’t) Recover for one you can’t.

Protect it with the free Lock PDF tool — nothing to register for, no watermark, file discarded once you’re done.