Password Protect a PDF: A Practical Guide
Emailing a contract, sharing medical records, sending financial statements — sometimes a PDF needs a lock. Done right, PDF encryption is genuinely strong. Done wrong — a weak password, or the wrong kind of password — it's decoration.
This guide covers the two password types, which tools to use, and how to share the password without defeating the purpose.
Try it free: Compress PDF
Before sharing sensitive PDFs, strip their metadata — free.
Open Compress PDFThe two password types (this matters)
PDFs support two passwords with very different strength. The open password (also called user password) encrypts the file — without it, the content is mathematically inaccessible. The permissions password (owner password) merely asks reader software to restrict printing, copying or editing.
The trap: permissions passwords are enforced by the honor system. Plenty of free tools ignore them completely. Use an open password for real confidentiality; treat permissions passwords as a polite request, nothing more.
How to add a password (free methods)
- Microsoft Word: File > Info > Protect Document > Encrypt with Password, then export to PDF — the encryption carries over
- LibreOffice: File > Export as PDF > Security tab — set passwords and choose AES-256
- Preview on Mac: File > Export as PDF, enable encryption and enter a password
- Adobe Acrobat: Tools > Protect > Encrypt with Password for the most options
Always choose AES-256 when offered — older RC4 encryption is crackable with modest effort.
Make the password actually strong
Encryption is only as strong as the password. 'Invoice2026' falls to dictionary attacks in seconds. Generate a long random password with a password manager — 16+ characters — and never reuse one across documents.
Share the password through a different channel than the file: if the PDF goes by email, send the password by text or call. Sending both in the same email is locking the door and taping the key to it.
Removing protection (when you own the file)
If you know the password and want to remove it — say, for archiving — open the PDF, enter the password, then save/export without security settings (in Acrobat: Protect > Remove Security). Only do this with files you own or are authorized to unlock.
Forgot the password to your own file? There's no legitimate 'recover' button — that's the point of encryption. Some tools attempt brute force, which only works on weak passwords, underscoring why yours shouldn't be one.
Passwords aren't the whole story
An encrypted PDF sent as a permanent email attachment still lives forever in inboxes. For sensitive documents, combine encryption with expiring share links, confirm recipient addresses, and strip metadata before sending.
What encryption can't do
Encryption protects the file in transit and at rest — nothing more. It can't stop the recipient from forwarding it, screenshotting it, or (with the password) printing it. It doesn't expire, it doesn't watermark, and it doesn't tell you who opened it.
For those needs, layer accordingly: expiring share links for time-bounding, visible watermarks with the recipient's name to discourage forwarding, and DRM platforms for the rare cases that truly need them. A password is one layer — make it the right layer for your actual threat.
Related guides
Frequently asked questions
How do I password protect a PDF for free?
Use Word's Encrypt with Password before exporting to PDF, LibreOffice's PDF Security tab, or Preview's encrypted export on Mac — all free and all offer real AES encryption.
What's the difference between open and permissions passwords?
An open password encrypts the file — content is inaccessible without it. A permissions password only requests that readers restrict printing/editing, and many tools ignore it. Use open passwords for real security.
Can a password-protected PDF be cracked?
With AES-256 and a strong random password, no — not practically. Weak passwords fall to dictionary attacks quickly, and old RC4 encryption is breakable regardless of password.
I forgot my PDF password. Can I recover it?
There's no built-in recovery — that's by design. Brute-force tools only succeed against weak passwords. Your best hope is remembering it or finding where you stored it.
Private by design: SwiftPDF tools run entirely in your browser — your files never leave your device.