How to Password-Protect a PDF (and Choose a Password That Holds Up)

Two kinds of PDF passwords

PDFs support two different passwords. An open password (user password) is required to open the document at all. A permissions password (owner password) lets anyone open and read the file but restricts actions such as printing, copying text, or editing. The second kind is a polite request that many tools ignore, while the first is real encryption of the content.

Protect PDF sets an open password. Anyone opening the file in a PDF reader — Adobe Acrobat, macOS Preview, a browser, a phone app — will be asked for it before any content is shown. The tool does not set separate printing or copying restrictions.

Step by step: protect a PDF

1. 1Finish the document first. Merge, edit, sign, and number it, and only then protect it: a protected file cannot be edited by other tools until it is unlocked.
2. 2Open Protect PDF and add the file.
3. 3Enter a password and type it again to confirm. The minimum is four characters, but use far more (see below).
4. 4Apply the protection and download the result. The file is encrypted with AES-128 inside your browser; neither the document nor the password is sent to a server.
5. 5Open the protected copy and check that it asks for the password and displays correctly. Keep the original unprotected file until you are sure.

Choosing a password that holds up

Encryption is only as strong as the password. Short or guessable passwords — birthdays, names, “password123” — can be cracked in seconds by software that tries millions of guesses per second.

• Use a passphrase of four or more unrelated words, for example “copper-lantern-seventeen-meadow”: long, easy to remember, hard to guess.
• Or use a random password of 14 or more characters from a password manager.
• Do not reuse the password you use for email, banking, or anything else.

Sharing the password safely

The most common mistake is emailing the password in the same message as the file — anyone who sees the email can open the document. Send the password through a different channel: a text message, a phone call, or a messaging app. For sensitive material, agree the password in advance.

There is no recovery. PDF Studio does not store your password, and a properly encrypted PDF cannot be opened without it. Store the password somewhere safe and keep the unprotected original until you are certain you will not need it.

What a password does not protect

• The file name and size are visible to anyone who has the file, so avoid putting sensitive details in the name.
• Copies you already sent. Protecting a file now does not protect an unprotected copy you emailed yesterday.
• What the recipient does next. Once someone opens the file with the password, they can save an unprotected copy.

To remove a password later — for example to merge or edit the file — use Unlock PDF with the correct password. And if your document contains information that must not be seen at all, protecting it is not the same as removing it: read how to hide sensitive information in a PDF.