Some documents should not be readable by anyone who happens to get the file. Adding a password is the simplest way to make sure only the intended reader can open it.
What a PDF password actually does
Adding a password to a PDF encrypts its contents. Without the correct password, the file is unreadable scrambled data — not just hidden behind a prompt you could click past, but genuinely inaccessible. This is the right level of protection for anything you would not want a stranger to read if the file ended up in the wrong inbox: financial statements, legal paperwork, medical records, HR documents, or confidential business plans.
It is worth knowing there are two kinds of PDF passwords. An open password (also called a user password) is required just to view the document. A permissions password (an owner password) lets anyone open the file but restricts actions like printing or copying. For keeping a document confidential, the open password is the one that matters, because it controls who can read the content at all.
Step-by-step: adding a password
1. Open the protection tool
Go to the Protect PDF tool. Because it runs in your browser, the document you are securing is encrypted on your own device — it is never uploaded. That is exactly what you want: it would defeat the purpose to send a confidential file across the internet in order to protect it.
2. Add your file and set a password
Drop in the PDF and enter the password you want to require. Enter it carefully — if the tool asks you to confirm it, do, because a typo here means a file even you cannot open.
3. Download the protected file
Export the encrypted PDF. Test it immediately by opening it and entering the password. Once you have confirmed it works, you can safely replace or delete the unprotected original.
Critical: There is no master key and no "forgot password" link for an encrypted PDF. If you lose the password, the contents are effectively gone. Store it somewhere reliable — ideally a password manager — before you delete the unprotected copy.
Where password protection fits — and where it doesn't
A password is the right tool when your goal is to control who can open a file. It is not, however, a substitute for redaction. If a document contains a few sensitive lines that specific readers should never see even though they are allowed to open the file, encryption does not help — anyone with the password sees everything. In that case, remove or black out the sensitive content properly before you distribute it, and use the password only to limit who receives the file at all. Think of encryption as a lock on the front door, not as a way to hide individual rooms from people you have already let inside.
Choosing a password that actually protects
Encryption is only as strong as the password behind it. A short, obvious password can be guessed no matter how good the underlying math is. Aim for something long and unpredictable:
- Length beats complexity. A passphrase of several unrelated words is both stronger and easier to remember than a short string of symbols.
- Avoid the obvious. Names, birthdays, the document's own title, and reused passwords are the first things an attacker tries.
- Use a unique password per sensitive document so one leak does not expose everything.
Sharing a protected PDF safely
Encryption only helps if you deliver the password sensibly. Never send the password in the same email as the file — if that message is intercepted or forwarded, the protection is meaningless. Share the password through a different channel entirely: a text message, a phone call, or a separate secure message. That way an attacker would need to compromise two channels, not one.
Related tasks you might need
Removing a password you no longer need
If you have a protected file that no longer needs to be locked — say the confidential period has passed — you can strip the password with the Unlock PDF tool, provided you know the current one. This is also the step to run before editing or converting a protected file, since most tools cannot read an encrypted PDF.
Protect the final version, not a draft
Apply the password as the last step, after any editing, signing, or combining is done. If you still need to make changes — merging in an attachment with the Merge PDF tool, for instance, or adding your signature with the Sign PDF tool — do that first, then encrypt the finished document. Trying to work on an already-protected file just means unlocking and re-locking it repeatedly.
The bottom line
Password-protecting a PDF is one of the highest-value, lowest-effort things you can do with a sensitive document. It takes under a minute, it turns a readable file into encrypted data for anyone without the key, and — done in your browser — it happens without the document ever leaving your device. Pair a strong, unique password with sensible sharing, and you have a genuinely private way to send confidential files.
Browse all PDF tools →