How to Password-Protect a PDF (3 Free Methods)

A password on a PDF is the digital equivalent of a locked drawer: it won't stop a determined thief with a crowbar, but it absolutely stops the casual snooper — the roommate borrowing your laptop, the email forwarded to the wrong person, the file left open on a shared computer. And unlike most things in tech, adding one is genuinely free. Here are three ways.

Method 1: Free browser tool (works anywhere)

This is the option that works on any device — Windows, Mac, Chromebook, even your phone:

1. Open PDFPax Protect PDF.
2. Drop in your PDF. The encryption happens in your browser — your document is never uploaded, which is exactly what you want when the file is sensitive enough to need a password in the first place.
3. Type your password, confirm it, and download the locked PDF.

The output uses real AES encryption, the same standard Adobe uses — opening it will prompt for the password in any PDF reader. Before you protect a batch of files, skim our guide to keeping PDFs small: encrypted files can't be compressed further, so shrink first, lock second.

Method 2: macOS Preview (built into every Mac)

Preview hides this feature in the export dialog, which is why most Mac users never find it:

1. Open the PDF in Preview.
2. Choose File > Export as PDF.
3. Check the Encrypt box, enter a password, and save.

That's it. The new file requires the password to open. One quirk: Preview's encryption uses a solid standard, but the dialog gives you no strength options — what you get is what you get. For most personal documents (tax files, medical records), it's perfectly adequate.

Method 3: Microsoft Word (if the document started as a Word file)

If you still have the original document in Word, locking it before it becomes a PDF is the cleanest route:

1. In Word, go to File > Save As and choose PDF as the format.
2. Click Options (Windows) or the details disclosure (Mac), and select Encrypt the document with a password.
3. Enter the password twice, save, and you're done.

This is arguably the best method when you own the source file, because the password is baked in from the start and you keep an unlocked master copy for editing.

Password tips that actually matter

• Length beats cleverness. A 16-character passphrase like correct-horse-staple (well, pick your own) is stronger and easier to remember than P@ssw0rd!. Password crackers yawn at substitutions.
• Send the password separately. Emailing the locked PDF and its password in the same message defeats the purpose. Text it, call, use a different channel.
• Know what a password can't do. It won't stop screenshots, phone photos of the screen, or someone you gave the password to forwarding it. It protects against accidental access, not betrayal.
• Keep an unlocked copy somewhere safe. If you forget the password, there's no "forgot password" link. A locked PDF with a lost password is a brick — store the password in a password manager.

Note the honest difference between tools: Adobe Acrobat (paid) also lets you set a separate permissions password that restricts printing or copying while allowing opening — handy for shared business documents. The free methods above lock the whole file, which is what most people need.

Working with documents that need more than a password? Our Redact PDF tool permanently blacks out sensitive text before sharing, and merging related files first keeps everything in one locked package.

FAQ

Can I remove a password from a PDF later?

Yes — open the file with the password, then save/export a new copy without encryption (in Acrobat: File > Properties > Security > No Security). You need the password to do this; there's no legitimate way around a password you don't know.

Will a password-protected PDF open on phones?

Yes. iOS, Android, and every major PDF reader prompt for the password and open the file normally once entered.

Is browser-based encryption safe?

The encryption itself is standard AES — identical in strength to desktop tools. The advantage of PDFPax specifically is that your file never leaves your device during the process, so there's no server copy to worry about.

Ready? Protect your PDF now — free, no sign-up, and your files never leave your device.

Two kinds of PDF passwords (this matters)

PDF supports two different passwords, and most people only learn the difference when it's too late:

• User password (open password): required to open the document at all. This is the real lock — without it, the file's contents are encrypted and unreadable. Use this when you want to control who can read the file.
• Owner password (permissions password): lets anyone open the file, but restricts printing, copying text, or editing. Use this when you want to share content but limit what recipients can do with it.

An honest warning about owner passwords: they're a polite request, not a vault. Many free tools ignore permission restrictions entirely, so a determined recipient can bypass them in seconds. If the content truly must stay secret, use a user (open) password — that's the one backed by real encryption.

If you forget the password

Let's be direct: there is no "forgot password" for a PDF. Proper PDF encryption (128-bit AES and above, which modern tools use) cannot be cracked in any practical timeframe. If you encrypted a file and lost the password, the content is effectively gone.

Your realistic options, in order:

1. Think hard — try variations you'd have used (old passwords, dates, the project's name). People usually remember within a few tries.
2. Check whether you emailed the file to yourself or saved an unprotected copy in cloud storage, sent items, or a backup.
3. Ask the sender for the password again if someone else protected it.

What doesn't work: online "PDF unlockers" promising instant removal. At best they're scams harvesting your files; at worst they install malware. And this is exactly why the article's password tips say to store the password in a password manager the moment you set it.

Removing protection from a file you own

Passwords aren't permanent. To remove one from your own document: open it with the password in a PDF reader, then save/print a new copy without security enabled (in most readers: File > Save As, or re-export without the password option). Only do this for files you own or have explicit permission to unlock — removing someone else's protection without consent is wrong and, in many places, illegal.

Frequently asked questions

Is a password-protected PDF really secure?
With a strong password and modern AES encryption, yes — against everyone except someone you gave the password to. The weak link is almost always the password itself ("company2026") or sharing it in the same email as the file.

Should I send the password in the same email as the PDF?
No. Send the file by email and the password by a different channel — a message, a call, or your company's chat. Anyone who intercepts one still can't use the other.

Does protection survive merging or converting?
Usually you must remove protection before merging, splitting, or converting — most tools can't process encrypted files. The output file won't carry the old password, so re-protect it afterward if needed.

Sharing protected PDFs without defeating the purpose

A password only helps if you handle the sharing correctly:

• Never put the password in the same message as the file. Email the PDF, then text or call with the password. One intercepted channel still leaves the file locked.
• Use a unique password per recipient for sensitive distributions. If a file leaks, you know whose copy it was — the same principle as watermarking with names.
• Set an expiry expectation: tell recipients the password scheme changes quarterly, and actually change it. Stale passwords accumulate.
• Don't use the same password as anything else. PDF passwords get shared around by nature; make sure a leaked one can't unlock someone's email.

And remember the earlier warning: a permissions (owner) password won't stop a determined recipient. If the document must not be copied, control distribution — fewer copies, named recipients — rather than relying on the password alone.

Sharing protected PDFs without defeating the purpose

A password only helps if you handle the sharing correctly:

• Never put the password in the same message as the file. Email the PDF, then text or call with the password. One intercepted channel still leaves the file locked.
• Use a unique password per recipient for sensitive distributions. If a file leaks, you know whose copy it was — the same principle as watermarking with names.
• Set an expiry expectation: tell recipients the password scheme changes quarterly, and actually change it. Stale passwords accumulate.
• Don't use the same password as anything else. PDF passwords get shared around by nature; make sure a leaked one can't unlock someone's email.

And remember the earlier warning: a permissions (owner) password won't stop a determined recipient. If the document must not be copied, control distribution — fewer copies, named recipients — rather than relying on the password alone.

Related guides

How-To Guides How to Watermark a PDF (Text Watermarks, Free) 7 min read How-To Guides How to Merge PDF Files: 3 Easy Methods 7 min read How-To Guides How to Compress a PDF Without Losing Quality 7 min read