Password protecting a PDF is one of those jobs that sounds technical and turns out to be short. You have a document you need to send — a contract draft, a report with personal details, a set of accounts — and you do not want anyone who happens to receive the file to open it. Adding a password means the file itself asks for proof before it shows its contents, rather than relying on the email or message that carried it being private.
Protect PDF does this in your browser. You choose a PDF, set a password, choose print, copy, and edit permissions, and download a protected copy. The file and the password never leave your device, because the encryption runs locally. This post walks through the process step by step, including the choices that are easy to get wrong.
Choose a password you can actually keep
The password is the whole protection, so it deserves a minute of thought. A short, guessable password — a name, a date, a common word — undermines the encryption, however strong the encryption itself is. A long, random password, or a passphrase of several unrelated words, is far harder to guess. Use your password manager if you have one, or write the password down somewhere safe and separate from the file, if that is how you manage passwords.
There is a hard truth to accept before you start: if you forget the password, recovery is not possible. There is no reset link for a PDF password, because the protection is in the file itself, not in an account. A protected PDF whose password is lost is, for practical purposes, locked. That is not a flaw in this tool; it is how file encryption works. So before you protect a file, be sure you have a way to remember or retrieve the password, and keep an unprotected copy somewhere safe — on your own device, not sent anywhere — in case you need it.
Protect the file, step by step
Start with the original PDF on your device. Open Protect PDF and select the file. You will be asked for a password, and usually asked to enter it twice, so a typing mistake does not lock you out of your own document. Take care with that second entry: a password mistyped twice in the same way becomes a password you do not know, and, as above, there is no recovery.
Next, consider the permissions. Protect PDF lets you control printing, copying, and editing separately from opening the file. These are the subject of the next post in detail, but for a first protection, a sensible default is to allow printing — because the recipient may need a paper copy — while blocking copying and editing, so the text cannot be lifted or altered casually. You can adjust this to fit the recipient: a draft for comment may need editing allowed, while a final version for reading may not.
Download the protected copy and check it before you send it. Open it in a PDF reader, enter the password, and confirm the pages look right and the permissions behave as you expected. Then check the file name: it helps to give the protected copy a clear name, so you do not later confuse it with the unprotected original, or send the wrong one by mistake.
Worked example: a fictional tenancy summary
Imagine a fictional landlord named Omar, at omar@example.org, who needs to send a tenancy summary to a prospective tenant. The summary contains the tenant's name, the property address in the example, and the monthly rent — details that should not sit in an inbox in plain form. Omar keeps an unprotected copy on his own computer, in a folder only he can access.
He opens Protect PDF, selects the summary, and sets a passphrase of four unrelated words, which he stores in his password manager. He allows printing, so the tenant can print a copy for their records, but blocks copying and editing, because this is a final summary, not a draft for amendment. He downloads the protected file, opens it, enters the passphrase, and confirms the pages and permissions are correct.
Then he sends the file — and, crucially, sends the passphrase separately, by a different channel, as explained in the checklist post. The tenant opens the file, prints a copy, and cannot casually copy the text or edit the rent figure. If Omar had sent the password in the same email as the file, anyone who intercepted that email would have had both halves of the protection at once, and the password would have added nothing.
If Omar later needs to combine this summary with other tenancy documents, Merge PDF can join them, though the merged result would need protecting again, and if he wants to mark a draft version before sharing, Add Watermark can stamp it first.
Honest limitations
A PDF password is a real barrier, but it is not a legal guarantee and it does not make a file secure against a determined attacker. Password protection deters casual access — a forwarded email, a shared drive, a lost attachment — and that covers most everyday risks. A determined attacker with time, tools, and the file itself has a different set of options, and no password on a document you willingly send to someone else can fully prevent that person from photographing, retyping, or otherwise reproducing what they can see on screen.
Permissions have a further limit: they are honoured by well-behaved PDF readers, but not all readers enforce them, and a recipient who can open the file can often find a tool that ignores the permissions. Treat permissions as a statement of intent and a friction against casual misuse, not as a lock that cannot be bypassed. If a document must never be copied or printed by its recipient, do not send it in a form they can open freely; use a viewing arrangement you control instead.
Also remember the scope: protecting a PDF does not protect the email, message, or drive that carries it, and it does not protect the unprotected original still sitting on your device. Good file hygiene — a safe copy, a stored password, a separate channel for the password — matters as much as the encryption itself.
For the wider picture of joining and handling PDFs, see how to merge and split PDFs.
FAQs
How do I password protect a PDF?
Open Protect PDF, select your file, set a password, choose print, copy, and edit permissions, and download the protected copy. Then open it and test the password before sending it to anyone.
What happens if I forget my PDF password?
Recovery is not possible. The password is part of the file's encryption, not an account you can reset. Keep the password in a password manager or another safe place, and keep an unprotected copy on your own device.
Does the file or password leave my device during protection?
No, with Protect PDF. The encryption runs in your browser, so neither the file nor the password is uploaded to a server. That is a meaningful privacy point for sensitive documents.
Is a password-protected PDF completely secure?
No. It deters casual access and is a sensible everyday protection, but it does not make a file legally secure against a determined attacker, and permissions are not enforced by every reader. Send the password separately, and do not rely on permissions alone for highly sensitive material.
Related reading: Removing a password you already know is the reverse job.
human review pending client designation