Password Protect a PDF, Free Online
Password protect a PDF free online with AES-256, the strongest encryption PDFs support. Anyone opening it will need the password — and the file is encrypted on your device, never uploaded.
Password Protect PDF
Fit meter
Settings appear once you add a PDF.
Your settings are saved on this device.
Advanced 5
Guards the permissions above. Left empty, a long random one is used so nobody can lift them.
Ctrl + Enter runs it ·
Bytes of your files sent anywhere: 0 B · nothing leaves this tab
Every request this page makes is listed as it happens. You’ll see our own code loading, and for some formats a codec engine, but never your file going out.
- Waiting for network activity…
Check it yourself: open your browser’s developer tools on the Network tab, or turn off Wi-Fi once the page has loaded. The tools keep working.
- 100% private Your PDFs never leave this device. Everything runs in your browser.
- No limits No file-size cap, no watermark, no sign-up and no daily quota. Free.
- Batch ready Add as many PDFs as you like; each one is handled and saved in one go.
How to password protect a PDF free online
-
Add your PDFs: Drop the PDF you want to lock.
-
Check the settings: Type a password twice. Under Advanced, choose whether people who open it may print, copy or edit.
-
Save the result: Save the encrypted copy. Every PDF reader will ask for the password before showing a single page.
Why it doesn’t upload
Encrypting a PDF on a website means sending the unencrypted file and your chosen password to that website — the one moment it’s least protected. Here the encryption runs on your device with qpdf, so the unlocked document never travels anywhere.
Check it in your browser’s Network tabWorth knowing
- Forget the password and the file can’t be opened — by you or by us. There is no reset.
- Permissions (no printing, no copying) are honored by mainstream readers but aren’t encryption-strength: some tools ignore them. The open password is what really protects the file.
- A short password can be guessed by brute force. Use at least 8 characters, or a few unrelated words.
- Encrypting invalidates existing digital signatures.
Under the hood
What happens to your file
qpdf, the reference implementation of PDF encryption, writes the file with AES-256 (the PDF 2.0 security handler) and the permissions you choose. The password never leaves the page; it is used once to derive the key and then discarded. A viewer can open the result only with the password.
Reference: qpdf manual · NIST FIPS 197 (AES) · ISO 32000-2 (PDF 2.0)
Why password protect a PDF on your own device?
Encrypting a document on a website means the unencrypted version reaches that website first — the one copy you were trying to protect. Here the PDF is encrypted with AES-256 inside your browser tab, and the locked file is the only thing that exists outside your own disk.
AES-256 is the strongest encryption the PDF format supports, and every modern reader opens it: Acrobat, Chrome, Edge, Firefox, Preview and phone viewers all ask for the password and open the file once it is right.
When to put a password on a PDF
-
Emailing a tax return or payslip
Email isn’t private end to end. Lock the attachment and send the password by text message or a phone call.
-
Sharing a contract before it’s signed
Keep drafts with prices and terms away from anyone the email gets forwarded to.
-
Client files for accountants and lawyers
Many firms require client documents to be encrypted in transit; a password on each PDF meets that without new software.
-
Medical reports and test results
A password keeps a forwarded or misdirected email from exposing health information.
-
Files on a USB stick or shared drive
Anything that could be lost or seen by others is safer encrypted, file by file.
Tips for a PDF password that actually protects
- Use at least 8 characters, or three or four unrelated words. Short passwords can be guessed by brute force, whatever the encryption.
- Never send the password in the same email as the file. A different channel is the whole point.
- Permissions (no printing, no copying) are honored by mainstream readers but aren’t encryption; the open password is what really protects the file.
- Store the password somewhere you’ll find it. There is no reset — not by you, and not by us.
- Encrypt last: sign, number and fill the PDF first, because encrypting makes later edits awkward and invalidates existing digital signatures.
Questions
How do I password protect a PDF for free, without Adobe Acrobat?
Drop it here, type a password twice and press Encrypt PDF — no Acrobat needed. The locked copy uses AES-256, the same encryption Acrobat uses, and asks for the password in Adobe Reader, Preview, Chrome, Edge and every other current reader.
How strong is AES-256 PDF encryption?
It’s the strongest the PDF standard offers and can’t be broken by trying keys. The weak point is always the password itself — a long one is effectively uncrackable, a short common one isn’t.
Can I stop people printing or copying my PDF?
Yes, under Advanced. Readers like Acrobat and Preview honor these settings, but they’re a request rather than a lock — for real control, rely on who knows the open password.
Will the password work on a phone?
Yes. iPhone, iPad and Android PDF viewers all open AES-256 encrypted PDFs and ask for the password.
Is my password sent anywhere?
No. The password and the file stay in your browser tab. Nothing is uploaded, and nothing is stored after you close it.
Should I password protect a PDF before emailing it?
For anything with account numbers, ID or health details, yes: email can be forwarded or read on a shared computer. Send the password by a different route — a text or a call — never in the same email.
Read more about this
More security & privacy tools
All security & privacy tools- Remove PDF Password Open a locked PDF once with its password and save a copy that opens without it.
- Unlock PDF Restrictions Remove print, copy and edit restrictions from a PDF you own.
- Redact PDF Black out text for good — the words underneath are removed, not covered.
- Remove PDF Metadata Strip the author, software, dates and hidden XMP before you share.