Protect PDF

Key takeaways

• Protect pdf files with real 128-bit encryption — set an open password, download the encrypted file, done in under a minute.
• Two passwords, two jobs: the open password controls who can read the file; the permissions password controls what readers may do (print, copy, edit).
• Seven permission switches let you block printing, copying, editing, commenting, form filling, accessibility extraction, and document assembly.
• There is no password recovery — because the file never leaves your device, nobody can reset it. Store the password in a password manager.
• Encryption happens entirely in your browser — the unprotected file never travels anywhere.

How to Password Protect PDF Free

Locking a PDF takes less than a minute:

1. Add your PDF. Drop the file onto the box above, or choose it from your device. It is read locally — nothing is uploaded.
2. Set the open password. This is the password every reader must type before the PDF opens. The strength meter helps you pick a strong one: aim for 12+ characters mixing upper and lower case, numbers, and symbols.
3. Confirm it, then set permissions. Re-type the password, optionally add a separate permissions password (with confirmation), and choose which of the seven actions readers may take: printing, copying, editing, commenting, form filling, accessibility extraction, and document assembly.
4. Click Protect PDF and download. The tool encrypts every page with 128-bit encryption and hands you a new file.

Open the downloaded file in any PDF reader to check: it should ask for the password immediately, before showing a single page.

Open password vs permissions password

PDF security has two different passwords, and this tool supports both:

• Open password (user password). Required to open and view the document at all. Without it, the file is unreadable — its text, images, and metadata are all encrypted. This is the password you share with the people who should read the file.
• Permissions password (owner password). Controls the restrictions: printing, copying, editing, commenting, form filling, accessibility extraction, and document assembly. Someone who opens the PDF with the open password can view it but cannot do the things you unchecked — unless they also know the permissions password. If you leave the permissions password blank, the tool reuses the open password, which is the common setup.

A practical example: email a fee invoice to a client protected with an open password they know, but uncheck printing and editing. They can read and verify it, but they cannot silently alter the amounts or print copies for redistribution.

What the permission restrictions do

• Allow printing. When unchecked, readers disable their Print button and menu for this file. Useful for draft reports or paid content you want viewed on screen only.
• Allow copying text and images. When unchecked, readers block text selection, copy-paste, and image extraction. Handy for price lists, study notes, or manuscripts shared for review.
• Allow editing. When unchecked, readers refuse changes to page content — no editing text, deleting pages, or inserting new ones.
• Allow comments and annotations. When unchecked, readers block sticky notes, highlights, and other markup.
• Allow filling forms and signing. When unchecked, readers refuse form field input and digital signatures.
• Allow copying for accessibility. When unchecked, even screen readers cannot extract text. Leave this checked unless you have a specific reason — unchecking it makes the PDF harder to use for visually impaired readers.
• Allow document assembly. When unchecked, readers block inserting, deleting, and rotating pages, as well as creating bookmarks and thumbnails.

One honest caveat, shared by every protect-PDF tool: these restrictions are enforced by the reader app. All major readers — Adobe Reader, Chrome, Edge, Firefox, Preview — honor them, but a small number of non-standard apps may not. For truly sensitive material, the open password (real encryption) is the protection that always holds, because the file content itself is scrambled without it.

Why encrypting in your browser is safer

Most online PDF tools ask you to upload the file to their server for processing. That means your unprotected document — the very thing you are trying to secure — travels across the internet and sits on someone else’s computer, even if only briefly. For a bank statement or a contract, that defeats the purpose.

This protect PDF tool does the encryption on your own device with JavaScript. The file is loaded into your browser’s memory, encrypted there with the standard PDF password algorithm (V=2, R=3, 128-bit RC4 — the same method desktop tools use), and the result is downloaded straight back to you. There is no server in the loop, no account to create, and no copy retained anywhere. You can even disconnect from the internet after the page loads and the tool keeps working.

Tips for a strong PDF password

• Length beats complexity tricks. A 14-character passphrase you can remember outperforms an 8-character puzzle you will forget. Combine three or four unrelated words with a number and a symbol.
• Never reuse the file’s own content. Do not use the client name, invoice number, or dates that appear inside the PDF.
• Share the password separately. Send the protected PDF by email and the password by SMS, a call, or a messaging app — never in the same message.
• Store a copy. There is no password recovery: because the file never leaves your device, nobody — including us — can reset it. Keep the password in a password manager or a safe place.
• Use letters, numbers, and symbols from the standard keyboard for maximum compatibility across readers and operating systems.

Protect PDF: frequently asked questions

How do I password protect a PDF for free?

Add your PDF to the tool above, type the password you want readers to enter, confirm it, and click Protect PDF. The file is encrypted in your browser with 128-bit encryption and downloads instantly. There is no signup, no watermark, and no file-size games for normal documents — the whole process takes under a minute and works in Chrome, Edge, Firefox, and Safari.

What is the difference between the open password and the permissions password?

The open password (user password) is required to open and view the PDF at all — without it the content is unreadable. The permissions password (owner password) controls the restrictions on printing, copying, and editing: someone opening the file with only the open password must obey the limits you set. If you leave the permissions password blank, the tool sensibly reuses the open password.

Can I stop people from printing or copying my PDF?

Yes. Seven permission switches control what readers may do: printing, copying text and images, editing, commenting, form filling, accessibility extraction, and document assembly. Uncheck any of them and all major PDF readers enforce the restriction. Note that a few non-standard apps may ignore permission flags, so for highly sensitive files the open password — which genuinely encrypts the content — is your strongest guarantee.

Is it safe to protect a PDF with an online tool?

It depends on where the encryption happens. Many tools upload your unprotected file to a server first, which exposes the very document you want to secure. This tool is different: the entire encryption runs locally in your browser using JavaScript, and your file never leaves your device. Nothing is stored, logged, or transmitted, so it is safe even for bank statements, contracts, and medical records.

What happens if I forget my PDF password?

There is no way to recover it. Because encryption happens on your device and the password is never sent anywhere, nobody can reset it for you — that is exactly what makes the protection real. Always store the password in a password manager or another safe place before you delete the unprotected original. If you lose it, the protected file cannot be opened by anyone.

Related free tools

• Unlock PDF — remove an old password before re-protecting.
• Organize PDF — reorder or delete pages before locking.
• PDF to PDF/A — prepare archiving-friendly copies.
• Redact PDF — black out sensitive text before sharing.