How to Password Protect PDF: Complete Guide

Q: What is the difference between open password and permission password?

Open password (user password): Required to open the PDF. The file is fully encrypted (256‑bit AES). Without this password, the content cannot be viewed at all. Use this for highly sensitive documents like tax returns, medical records, or legal contracts. Permission password (owner password): Does not restrict opening. Anyone can view the PDF, but actions like editing, copying text, printing, or adding comments are blocked. This prevents tampering but does not hide content. Permission‑only protection is weaker and can be removed by free online tools within seconds. Recommendation: For true confidentiality, always set an open password. Add a permission password only as an extra layer to prevent casual modifications. Never rely on permission passwords alone for sensitive information.

Q: How strong should my PDF password be?

Use a strong, unique password to prevent brute‑force attacks. Follow these guidelines: Minimum 12 characters (longer is better – 16+ ideal). Mix uppercase and lowercase letters, numbers, and symbols (e.g., `B8#kLp$2mQw9`). Avoid dictionary words, names, birthdates, or common phrases. Do not reuse passwords from other accounts (email, bank, social media). Store passwords in a password manager (Bitwarden, 1Password, LastPass). Example of a strong password: `BlueCoffee-42-River!` (passphrase) or `xT9$mKp2@vLq8` (random). If you lose the open password, the PDF is permanently inaccessible – there is no recovery. Therefore, always keep a backup of the unlocked original or store the password securely.

Q: Does adding a password to a PDF change its file size?

Adding a password to a PDF (encryption) does not significantly change the file size. The encryption process adds a small amount of metadata (usually less than 1 KB) but does not alter the compressed content. A 5 MB PDF will remain approximately 5 MB after password protection. However, encrypted PDFs compress less efficiently than unencrypted ones because encrypted data appears random. If you need to reduce file size, you should compress the PDF before adding a password, not after. Use our Compress PDF tool first, then password protect. Conversely, removing a password does not reduce file size either.

Q: What encryption should I use when password protecting a PDF?

Always use 256‑bit AES (Advanced Encryption Standard) – this is the current industry standard and is approved for top‑secret government documents. No known practical attack exists; brute‑forcing would take billions of years. 256‑bit AES: Use for all sensitive documents – available in our Protect PDF tool, Adobe Acrobat Pro, PDF‑XChange Editor (select 256‑bit). 128‑bit AES: Also secure but slightly weaker; acceptable for internal, less sensitive files. 40‑bit RC4: Obsolete and can be cracked in minutes – avoid any tool that offers only RC4. When using online or desktop tools, always select the highest encryption level available. Our online tool defaults to 256‑bit AES, which provides maximum security.

Sharing sensitive documents – contracts, tax returns, medical records, or business proposals – requires more than just sending the file. Without password protection, anyone who receives the PDF can open, copy, edit, and redistribute it. Password protecting a PDF ensures that only authorized people can view or modify your documents. This comprehensive guide covers every method to password protect PDFs, from quick online tools to professional offline software, with detailed steps for both open passwords (restrict viewing) and permission passwords (restrict editing, printing, copying). You will also learn best practices for strong passwords and how to avoid common security mistakes.

Why Password Protect a PDF?

Adding a password to a PDF provides essential security benefits:

Prevent unauthorized viewing: An open password ensures only people with the password can open the file.
Stop editing and tampering: A permission password disables editing, copying, and printing, preserving document integrity.
Meet compliance requirements: GDPR, HIPAA, and other regulations often require encryption for personal data.
Control distribution: Even if a file is shared beyond the intended recipient, the password blocks access.
Add a layer of defense: Passwords work alongside other security measures (e.g., encrypted email).

Two Types of PDF Passwords – Know What You Are Setting

PDF security offers two independent password types. You can use one or both.

Password Type	What It Does	When to Use	Encryption Strength
Open Password (User Password)	Required to open the PDF. Without it, content is unreadable.	Highly sensitive documents (bank statements, medical records, legal contracts).	256-bit AES (unbreakable)
Permission Password (Owner Password)	Allows opening but restricts editing, copying, printing, etc.	Shareable documents you want people to read but not modify (e.g., quotes, invoices).	128-bit AES (can be removed by online tools)

Recommendation: For true confidentiality, always set an open password. Use permission passwords only to prevent casual tampering, not for strong security.

Method 1: Password Protect PDF Using Online Tools (Fastest, No Installation)

Online tools are ideal for quick protection of non‑sensitive documents. Never upload confidential files to unknown online services.

Using Our Free Protect PDF Tool:

Go to Protect PDF.
Upload your PDF (drag and drop or click to select).
To set an open password: Check "Require a password to open the document" and enter a strong password.
To set a permission password: Check "Restrict editing and printing" and enter a separate password.
Choose restrictions: disable printing, disable copying, disable editing, etc.
Select encryption: 256‑bit AES (recommended).
Click "Protect" – the tool encrypts the file.
Download the password‑protected PDF. Your file is processed in your browser and never uploaded to our servers.

Alternative Free Online Tools:

SmallPDF Protect PDF: Free tier with daily limits. Adds watermark in free version.
iLovePDF Protect PDF: Allows open password and permissions. Free for up to 2 tasks/day.
Sejda PDF Password: No registration, 50 MB limit, no watermark.

Privacy warning: Do not upload sensitive documents (legal, medical, financial) to any online tool – use offline software instead.

Method 2: Password Protect PDF Using Adobe Acrobat Pro (Professional, Offline)

Adobe Acrobat Pro is the industry standard for PDF security, offering 256‑bit AES encryption and granular permission controls.

Open your PDF in Adobe Acrobat Pro.
Go to Tools > Protect > Protect Using Password.
Choose one or both options:
- Require a password to open the document – set an open password.
- Restrict editing and printing of the document – set a permission password.
For permission restrictions, configure:
- Printing allowed: None, Low Resolution (150 DPI), or High Resolution.
- Changes allowed: None, Commenting & filling forms, Filling forms & signing, or Any changes.
- Uncheck "Enable copying of text, images and other content" to disable copying.
Select encryption level: 256‑bit AES (recommended).
Click OK, then save the file. The PDF is now password protected.

Adobe Acrobat Pro costs approximately $15/month. The free Adobe Acrobat Reader cannot apply open passwords (only permission passwords).

Method 3: Password Protect PDF Using Free Desktop Software (Offline, No Upload)

If you need offline protection without paying for Adobe, these free tools work well.

PDF‑XChange Editor (Free version, Windows):

Open the PDF in PDF‑XChange Editor.
Go to File > Document Properties > Security.
Set Security Method to "Password Security".
In the dialog, set:
- "Require a password to open" – open password.
- "Restrict editing and printing" – permission password with restrictions.
Choose encryption: 128‑bit or 256‑bit AES.
Click OK, then save. The free version adds a small watermark, but the security features work fully.

LibreOffice Draw (Free, Cross‑platform – Windows, Mac, Linux):

Open the PDF in LibreOffice Draw (it imports as a drawing).
Go to File > Export As > Export as PDF.
Click the Security tab.
Set a password to open, a password to restrict permissions, or both.
Choose restrictions (disable printing, disable copying, etc.).
Click Export. The resulting PDF will be password protected.

Comparison Table: PDF Password Protection Methods

Tool	Price	Open Password	Permissions	Encryption	Privacy
Online Protect PDF (DonePDF)	Free	✅ Yes	✅ Yes	256-bit AES	Files uploaded – not for sensitive
Adobe Acrobat Pro	~$15/month	✅ Yes	✅ Yes (granular)	256-bit AES	Local (offline)
PDF-XChange Editor (free)	Free (watermark)	✅ Yes	✅ Yes	128/256-bit AES	Local
LibreOffice Draw	Free	✅ Yes	✅ Yes	128-bit AES	Local

Step-by-Step Workflow: Password Protect Your PDF

Identify the sensitivity level of the document. For confidential, use an open password. For internal documents, permission password may suffice.
Choose your tool: online for speed (non‑sensitive), Adobe Acrobat Pro for professional, or PDF‑XChange Editor for free offline.
Set a strong open password (minimum 12 characters, mix of letters, numbers, symbols).
Optionally set a permission password with restrictions (different from open password).
Select 256‑bit AES encryption if available.
Apply protection and save the file under a new name (e.g., "contract_secured.pdf").
Test the protected PDF: open it in Adobe Reader or a browser and verify the password prompt appears and restrictions work.
Share the password separately via a different channel (SMS, phone, password manager). Never send the password in the same email as the PDF.
Keep a backup of the unprotected original in a secure, encrypted location.

Best Practices for Strong PDF Passwords

Use long passphrases: "Correct-Horse-Battery-Staple" is easier to remember and stronger than short random strings.
Minimum 12 characters: Short passwords (6‑8 characters) can be cracked in minutes.
Mix character types: Uppercase, lowercase, numbers, symbols (e.g., `B#7kLp@2mQw9`).
Avoid personal information: No birthdays, names, or company names.
Do not reuse passwords: Use a unique password for each PDF.
Store passwords in a password manager: Bitwarden, 1Password, or LastPass.
Never write passwords on sticky notes attached to your monitor.

Common Mistakes When Password Protecting PDFs

Using weak or common passwords: "password123", "document", "admin" – easily guessed.
Relying only on permission passwords for confidentiality: Permission‑only PDFs can be unlocked by free online tools. Always add an open password for sensitive content.
Forgetting the password: For open passwords, there is no recovery. Keep a backup unlocked copy or store the password securely.
Sending the password in the same email as the PDF: If the email is intercepted, the protection is useless. Use separate channels.
Not testing the protected PDF: Always open the file after protection to confirm the password works and restrictions are enforced.
Using online tools for sensitive documents: Unknown tools may store or leak your files. Use offline software for confidential PDFs.
Applying protection after sharing the unprotected file: Once a copy exists without password, protection on another copy does not secure the leaked version. Protect before distribution.

How to Remove or Change PDF Password Protection

If you are the owner and know the password, you can remove or change it.

Remove password: Open the PDF with the password, then use the same tool to remove security (e.g., Acrobat: Tools > Protect > Remove Security; PDF‑XChange: Security > No Security).
Change password: Remove the old password first, then apply a new one with your desired settings.
If you forgot the password: For open passwords, the file is permanently lost. For permission passwords only, free tools can strip restrictions (see our Unlock PDF tool).

Tools for PDF Management – DonePDF Utilities

After password protecting your PDF, you may need these related tools:

Unlock PDF – Remove password from PDFs you own (requires password for open passwords).
Compress PDF – Reduce file size after protection (compression does not remove encryption).
Add Watermark – Mark as "CONFIDENTIAL" before password protecting.
PDF to Word – Edit the unlocked version.
Merge PDF – Combine multiple password‑protected PDFs (you will need to unlock them first).

Master every aspect of working with PDFs through our comprehensive guides:

Introduction & Basics

Security & Passwords

Conversion Guides

Page Management

Use Cases & Best Tools

Conclusion – Protect Your PDFs with Strong Passwords

Password protecting a PDF is one of the simplest and most effective ways to secure your documents. Whether you use our free online tool for quick protection of non‑sensitive files, or Adobe Acrobat Pro for professional, offline security, the principles remain: use strong, unique passwords, apply open passwords for true confidentiality, and never share the password in the same email as the file. With this guide, you can confidently share password‑protected PDFs knowing that only authorized recipients can access your content.

Frequently Asked Questions

How can I password protect a PDF for free?

You can password protect a PDF for free using several methods:

Online (fastest): Use our Protect PDF tool. Upload your PDF, set an open password (required to view) and/or a permission password (restrict editing/printing), then download the protected file. No registration, 128‑bit AES encryption, files never leave your device.
Offline (Windows): Download PDF‑XChange Editor (free version). Open PDF, go to File > Document Properties > Security > Password Security. Set passwords and restrictions, then save (free version adds a small watermark).
Offline (cross‑platform): Use LibreOffice Draw – export as PDF with security options (passwords and restrictions).

For sensitive documents, use offline tools to avoid uploading. For quick, non‑sensitive files, our online tool works perfectly.

What is the difference between open password and permission password?

Open password (user password): Required to open the PDF. The file is fully encrypted (256‑bit AES). Without this password, the content cannot be viewed at all. Use this for highly sensitive documents like tax returns, medical records, or legal contracts.

Permission password (owner password): Does not restrict opening. Anyone can view the PDF, but actions like editing, copying text, printing, or adding comments are blocked. This prevents tampering but does not hide content. Permission‑only protection is weaker and can be removed by free online tools within seconds.

Recommendation: For true confidentiality, always set an open password. Add a permission password only as an extra layer to prevent casual modifications. Never rely on permission passwords alone for sensitive information.

Can I password protect a PDF using Adobe Acrobat Reader for free?

The free Adobe Acrobat Reader has very limited protection capabilities. You can add a permission password (restrict editing and printing) using the free Reader: open PDF, click Tools > Protect > More Protection > Restrict Editing and Printing. However, you cannot set an open password (a password required to open the file) in the free Reader – that feature requires Adobe Acrobat Pro (paid, ~$15/month).

For free open password protection, use our online Protect PDF tool or PDF‑XChange Editor. Both allow you to set open passwords without cost.

How strong should my PDF password be?

Use a strong, unique password to prevent brute‑force attacks. Follow these guidelines:

Minimum 12 characters (longer is better – 16+ ideal).
Mix uppercase and lowercase letters, numbers, and symbols (e.g., `B8#kLp$2mQw9`).
Avoid dictionary words, names, birthdates, or common phrases.
Do not reuse passwords from other accounts (email, bank, social media).
Store passwords in a password manager (Bitwarden, 1Password, LastPass).

Example of a strong password: `BlueCoffee-42-River!` (passphrase) or `xT9$mKp2@vLq8` (random).

If you lose the open password, the PDF is permanently inaccessible – there is no recovery. Therefore, always keep a backup of the unlocked original or store the password securely.

How do I set a password to open a PDF (open password)?

Setting an open password (required to view) is simple with the right tool.

Using our online Protect PDF tool: Upload your PDF, check "Require a password to open the document", enter a strong password, click Protect, and download.
Using Adobe Acrobat Pro: Tools > Protect > Protect Using Password > check "Require a password to open the document", set password, save.
Using PDF‑XChange Editor (free): File > Document Properties > Security > Password Security > set "Require a password to open", save.

After setting, test the PDF by opening it – you should be prompted for the password. Never share the password in the same email as the PDF. Use a separate channel (SMS, phone, password manager).

How do I restrict editing and printing in a PDF without requiring a password to open?

To restrict editing and printing but allow free opening (permission password only):

Using our online Protect PDF tool: Upload your PDF, check "Restrict editing and printing", uncheck "Require a password to open". Set a permission password, choose restrictions (disable printing, disable copying, etc.), then protect.
Using Adobe Acrobat Pro: Tools > Protect > Protect Using Password > check "Restrict editing and printing of the document", set a permission password. Do not check "Require a password to open".
Using PDF‑XChange Editor: File > Document Properties > Security > Password Security > set "Restrict editing and printing" and set a password. Leave open password blank.

Recipients can open the PDF without any password, but editing, copying, and printing will be disabled unless they have the permission password. Note: These restrictions can be removed by free online tools; they are not secure against determined users.

Does adding a password to a PDF change its file size?

Adding a password to a PDF (encryption) does not significantly change the file size. The encryption process adds a small amount of metadata (usually less than 1 KB) but does not alter the compressed content. A 5 MB PDF will remain approximately 5 MB after password protection.

However, encrypted PDFs compress less efficiently than unencrypted ones because encrypted data appears random. If you need to reduce file size, you should compress the PDF before adding a password, not after. Use our Compress PDF tool first, then password protect. Conversely, removing a password does not reduce file size either.

What encryption should I use when password protecting a PDF?

Always use 256‑bit AES (Advanced Encryption Standard) – this is the current industry standard and is approved for top‑secret government documents. No known practical attack exists; brute‑forcing would take billions of years.

256‑bit AES: Use for all sensitive documents – available in our Protect PDF tool, Adobe Acrobat Pro, PDF‑XChange Editor (select 256‑bit).
128‑bit AES: Also secure but slightly weaker; acceptable for internal, less sensitive files.
40‑bit RC4: Obsolete and can be cracked in minutes – avoid any tool that offers only RC4.

When using online or desktop tools, always select the highest encryption level available. Our online tool defaults to 256‑bit AES, which provides maximum security.