Password protecting a PDF is the simplest way to prevent unauthorized access to sensitive documents โ€” contracts, financial reports, medical records, personal information and proprietary data. Once protected, the PDF cannot be opened without the correct password, giving you control over who can view your content.

User Password vs Owner Password

PDF encryption supports two separate passwords:

  • User password (Open password): Required to open and view the document. Anyone without this password sees an encrypted file they cannot read. This is the main password you share with authorized recipients.
  • Owner password (Permissions password): Controls permissions โ€” who can print, copy, edit or annotate the document. Setting a different owner password means you retain the ability to change permissions, while recipients with only the user password are bound by the restrictions you set.

PDF Permission Controls

  • Restrict printing: Prevent recipients from printing the document โ€” useful for digital-only distribution of sensitive reports.
  • Restrict copying: Block text selection and content copying โ€” important for legally sensitive documents where verbatim copying should be controlled.
Technical note: This tool uses qpdf to apply 128-bit PDF standard encryption. This is industry-standard protection for everyday use. For classified or legally regulated documents, consult your organization's security policy.

After Protecting โ€” Complete Your Workflow

Protect PDF works best as the final step in a document workflow. First Sign the PDF, then add stamps if needed, then compress if the file is large for email, and finally apply password protection here before sending to recipients.

Choosing a Strong PDF Password

The security of a password-protected PDF is only as strong as the password itself. The 128-bit encryption used by this tool is robust, but a weak password can still be guessed or brute-forced by determined attackers. Follow these guidelines:

  • Use at least 12 characters mixing uppercase, lowercase, numbers and symbols
  • Avoid common words, names, dates or anything related to the document content
  • Use a unique password for each protected document โ€” don't reuse passwords
  • Store passwords in a password manager rather than in a separate document or email
  • Share the password via a different channel from the document (call or text instead of email)

What PDF Password Protection Does Not Do

Understanding the limitations of PDF password protection helps you make informed decisions about document security:

  • It does not prevent screenshots: Anyone who can view the document can capture screenshots of the content. Password protection controls access, not reproduction.
  • It does not guarantee encryption in transit: The file is encrypted at rest, but you should also use secure channels (encrypted email, SFTP, secure file-sharing services) when sending sensitive documents.
  • Owner password restrictions can be bypassed: Print and copy restrictions set by the owner password can be removed by recipients who know the password with freely available PDF tools. Rely on trust and legal agreements for sensitive content, not technical restrictions alone.
  • It is not a digital signature: Password protection does not prove who created or approved the document. For authenticity and tamper evidence, use a digital signature or Sign PDF.