PDF password protection: what it does and doesn't do
PDFs actually support two different passwords, and they are not equally strong. Knowing the difference stops you from relying on protection that a determined reader can strip in seconds.
Drag and drop here, or choose from your device.
Up to 50 MB per file. Files are processed in your browser.
Full options and FAQs on the PDF Password Protection page.
The two kinds of password
- Open password (user password): the file cannot be opened at all without it. The content is genuinely encrypted — this is real protection.
- Permissions password (owner password): the file opens freely, but printing, copying or editing is restricted. These restrictions are enforced by the reader software, not by encryption.
The honest limits
Permissions passwords are a courtesy, not a lock: many tools simply ignore them, so never treat one as confidentiality. Open passwords are strong only as strong as the password itself — 'Acme2026' falls to automated guessing in minutes, a four-word phrase does not.
And no password protects content once the legitimate recipient opens the file. They can photograph the screen, print it, or forward it. Protection controls access in transit, not behaviour after opening.
Using protection sensibly
- Encrypt with an open password for anything confidential in transit.
- Deliver the password by a separate channel from the file.
- Skip permissions passwords for genuinely sensitive content — they slow down honest users, not attackers.
- Keep passwords long and never reuse one across documents sent to different parties.
Step by step
- 1Decide what you need: encryption (open password) or light restrictions (permissions).
- 2For anything confidential, apply an open password below.
- 3Choose a long, unique password and record it safely.
- 4Send file and password by separate channels.
Frequently asked questions
- Is a protected PDF safe to email?
- With a strong open password, yes — the file's contents are encrypted in transit. The weak link is usually the password, not the encryption.
- Can someone remove the protection without the password?
- Permissions restrictions, often yes. Open-password encryption, no — not without guessing the password, which is why password length matters.