How to Password Protect a PDF Free — Online, No Software
Sending a sensitive PDF by email? Sharing a contract or confidential report? Adding a password means only the intended recipient — the person who knows the password — can open the document. This guide shows you how to password protect a PDF free using a browser-based tool, with no software to install and no file ever leaving your device.
When Should You Password Protect a PDF?
Not every PDF needs a password, but some certainly do:
- Legal documents: Contracts, NDAs, settlement agreements — restrict access to named parties.
- Financial documents: Bank statements, tax returns, payroll files — keep personal financial data private.
- Medical records: Patient reports, prescriptions, test results — protect health information.
- HR documents: Performance reviews, offer letters, salary data — limit access within an organisation.
- Intellectual property: Proprietary designs, trade secret documentation — prevent unauthorised viewing.
- Confidential reports: Board papers, investor decks, strategic plans.
If you're emailing a document to a specific person and you wouldn't want anyone else to open it, a password is appropriate.
How to Password Protect a PDF — Step by Step
The Protect PDF tool adds a password to your PDF using pdf-lib, which runs entirely in your browser. The password is embedded in the file using standard PDF encryption.
Step 1 — Upload your PDF
Go to want2convert.com/protect-pdf and drag your PDF into the upload zone, or click to browse.
Step 2 — Set a password
Enter the password you want to use. A few guidelines for choosing a good password:
- At least 12 characters
- Mix uppercase, lowercase, numbers, and symbols
- Don't use common words or patterns
- Don't use a password you use elsewhere
Use the Password Generator on this site to create a strong, random password — then share it with the recipient securely (phone call, separate email, messaging app).
Step 3 — Click "Protect PDF" and download
Click Protect PDF. The tool encrypts the file and prepares it for download. Click Download to save the password-protected PDF.
When the recipient opens the file in any PDF reader, they'll be prompted to enter the password before the content displays.
Types of PDF Passwords
PDFs support two distinct password types:
User password (open password): What most people mean by "password protecting a PDF." Anyone who wants to open the file must enter this password. Without it, the content is unreadable.
Owner password (permissions password): Controls what an authorised reader can do with an open PDF — whether they can print, copy text, or make changes. Some PDF tools require an owner password to change these permissions.
The Protect PDF tool sets a user/open password. This is the most common requirement — preventing unauthorised access to the document.
How Secure Is a PDF Password?
PDF encryption uses AES-128 or AES-256 depending on the PDF standard version. AES-256 is the same encryption standard used for secure banking and government communications. A well-chosen password with AES-256 encryption is computationally infeasible to brute-force.
However, the password protection is only as strong as the password itself. A short, common password (1234, password, company2024) can be cracked quickly. A 16-character random password cannot.
One important caveat: PDF password protection prevents casual access, but does not make a document "forensically secure." Sophisticated attackers with specialised tools and weak passwords will eventually get in. For genuinely top-secret documents, use a proper encrypted container (VeraCrypt, etc.) rather than relying on PDF passwords alone.
What to Do If You Forget the Password
If you've forgotten the password to your own PDF, the Unlock PDF tool can attempt to remove the password if the original protection settings allow it. However, a properly set open password with a strong passphrase cannot be recovered — the encryption is too strong.
This is why it's important to:
- Store passwords in a password manager
- Send a copy to yourself alongside the document
- Keep an unprotected original in secure local storage
Sharing the Password Securely
Don't include the password in the same email as the protected PDF — that defeats the purpose. Instead:
- Phone call or video call: Tell the recipient the password verbally
- Text message: Send via a different channel than the email
- Separate email: A different email address, or at minimum a separate email sent before or after the document
- Signal or encrypted messaging: Use an end-to-end encrypted messaging app
A common professional practice is to email the protected PDF and then call or text the recipient with the password.
Related Tools
- Unlock PDF — remove a password from a PDF you own
- Watermark PDF — add a CONFIDENTIAL watermark as a visual deterrent
- Password Generator — generate a strong random password for your protected PDF
- Compress PDF — reduce the PDF size before sending the protected version