How to Password-Protect a PDF

Two Kinds of PDF Passwords

PDFs support two separate passwords. A user, or open, password is required to open and read the document at all. An owner, or permissions, password does not block opening; instead it restricts actions like printing, copying text, or editing. You can set either or both. A common setup is no open password but an owner password that prevents editing while still letting people view the file.

Which one you want depends on your goal. To keep a document private, set a user password so only people who have it can open the file. To let anyone read it but stop them altering or extracting content, set only an owner password. Setting both gives layered control, though, as we will see, the restrictions are weaker than the open password.

How to Add a Password

In Adobe Acrobat, open the PDF and choose Protect then Protect Using Password, then decide whether the password is needed to open the document or to restrict editing and printing. Enter a strong password, confirm it, and save. Free and online tools follow the same idea: upload or open the file, type a password, and download the protected copy.

Choose a long, unique passphrase, and share it through a different channel than the file itself, texting the password rather than emailing it alongside the attachment, for example. If you lose an open password there is no official recovery; the encryption is designed to make guessing impractical, so store it in a password manager.

Encryption Strength: Aim for AES-256

A password is only as strong as the encryption behind it. Modern PDFs should use AES-256, the algorithm standardized in PDF 2.0 (ISO 32000-2). Older options like RC4 and 128-bit encryption are weaker and, in some cases, broken, so avoid them if your tool lets you choose. When a program offers an AES 256-bit or Acrobat X and later compatibility setting, that is the one to pick.

Encryption strength matters more than password length alone, because a weak cipher can be attacked regardless of your passphrase. Reputable, up-to-date PDF tools default to AES-256, but very old software or ancient files may still use vulnerable schemes. If you are protecting something important, check the tool's security settings and re-save legacy documents with modern encryption.

What PDF Passwords Can and Can't Do

Understand what a PDF password does not do. Owner-password restrictions on printing or copying are enforced by the PDF reader, not the file itself, and many tools will ignore or strip them, so treat permissions as a polite request rather than a hard lock. Only the open-password encryption genuinely protects the content from being read.

Encryption also protects the file only while it stays encrypted. Once someone opens it and re-saves an unprotected copy, or takes a screenshot, your control ends. For highly sensitive data, combine a strong open password with secure delivery, and remember that the weakest link is often how the password is shared, not the math behind it.

Removing a Password You Own

If you own a document and know its password, removing protection is straightforward. Open the PDF, enter the password, and in Acrobat choose Protect then remove security, or in many tools simply unlock and save an unprotected copy. On a Mac, opening the file in Preview with the password and exporting to a new PDF drops the encryption. Only remove passwords from files you have the right to change.