How to Password Protect a PDF

Whether you are sending a contract, a tax return, a legal brief, or an employee onboarding packet, some PDFs should not be readable by anyone who happens to get the file. Adding a password to a PDF is the simplest way to control access. The good news is you can do it for free using software you probably already have — Microsoft Word, Mac Preview, and Google Docs all have built-in options. This guide walks through every free method, explains the different types of PDF passwords, and tells you what password protection can and cannot do.

Why Password-Protect a PDF?

PDF is the standard format for distributing finished documents because it preserves formatting across every device. But that ubiquity also makes it risky: an unsecured PDF sent as an email attachment can be opened by anyone who receives it, forwards it, or gains access to the recipient's email account. Password protection adds a layer of security for:

• Financial documents: Bank statements, tax returns, invoices, payroll records.
• Legal documents: Contracts, NDAs, court filings, settlement agreements.
• HR materials: Offer letters, performance reviews, termination paperwork.
• Medical records: HIPAA-regulated documents that require confidentiality.
• Personal information: Resumes with contact details, school transcripts, identification documents.

The Two Types of PDF Passwords

PDF security has two distinct password types, and understanding the difference is crucial:

Document Open Password (User Password)

This password is required just to open and view the PDF. Without it, the file is unreadable. This is what most people mean when they say "password-protect a PDF." It uses AES-128 or AES-256 encryption to scramble the file content so that it cannot be viewed without the correct password. This is the strongest form of PDF security and the one you should use for confidential documents.

Permissions Password (Owner Password)

This password restricts what the recipient can do with the PDF once it is open — printing, copying text, editing, adding comments, etc. However, the permissions password is notoriously weak. Many free PDF tools can strip an owner password in seconds because the specification does not require actual encryption of the permissions data. Think of the owner password as a polite request rather than real security. If you need to genuinely prevent someone from copying or printing your document, you need a dedicated DRM solution, not PDF permissions.

Method 1: Microsoft Word (Windows and Mac)

If you have the original document (not just the PDF), Word is the easiest free method. This works whether you are using Microsoft 365 or a standalone version of Office 2019 or later.

1. Open the document in Word. It can be a .docx, .doc, .rtf, or any format Word supports.
2. Go to File > Save As and choose PDF as the file type.
3. Click the "Options" button (near the Save button, not the main options menu).
4. Check "Encrypt the document with a password" at the bottom of the dialog.
5. Enter your password and confirm it. Word enforces AES-128 encryption.
6. Save the PDF. The resulting file will prompt for a password whenever someone tries to open it.

Important: Word's password protection only applies to the PDF export, not the original .docx file. If you save the document again as a different PDF without the password option checked, that copy will be unprotected. Always keep careful track of which versions of your file are secured and which are not.

Method 2: Mac Preview

If you use a Mac, Preview has a built-in PDF password feature that is surprisingly easy to use. It works with any PDF you can open in Preview, including scanned PDFs and PDFs created by other applications.

1. Open the PDF in Preview (double-clicking a PDF on a Mac usually opens it in Preview by default).
2. Go to File > Export (or press Command+Shift+S).
3. Check the "Encrypt" checkbox at the bottom of the export dialog.
4. Enter and verify your password.
5. Choose a new filename (to keep the original unencrypted copy) or overwrite the original.
6. Click Save.

Preview uses 128-bit AES encryption, which is secure enough for most purposes. The only limitation is that Preview does not support permissions passwords — you can only set an open password. For most users, this is all you need.

Method 3: Google Docs and Google Drive

Google Drive does not have a direct "password protect PDF" feature, but you can use a workaround if you have a Google account (which is free). Upload the PDF to Google Drive, then use "Restrict" sharing settings to limit access to specific people. While this is not the same as a PDF password (it relies on Google's access control rather than file-level encryption), it is effective if you are sharing within a Google Workspace environment.

If you need actual file-level encryption, you can also open the document in Google Docs, then use File > Download > PDF Document and use a third-party add-on to encrypt it. However, this is less convenient than the Word or Preview methods.

Method 4: Adobe Acrobat (Paid, Most Powerful)

Adobe Acrobat Pro is the most feature-rich option for PDF security. It supports both open passwords and permissions passwords, with configurable encryption levels (128-bit AES, 256-bit AES) and granular restrictions (allow printing at low resolution only, allow text access for screen readers only, etc.). Acrobat Pro is expensive — about $20 per month — so it is only worth it if you work with PDFs professionally. For occasional use, the free methods above are perfectly adequate.

Method 5: Free Online Tools

Many online PDF tools offer password protection. The risk is that you must upload your sensitive document to a third-party server — and you have no guarantee what happens to it afterward. Some online services claim to delete files after processing, but you cannot verify this. If your document contains sensitive information, avoid online tools. If the content is not sensitive, online tools can be quick and convenient. Always check the privacy policy and look for services that process files in the browser (client-side) rather than on a server.

How Strong Is PDF Password Protection?

Modern PDF encryption uses the Advanced Encryption Standard (AES) with 128-bit or 256-bit keys. AES-256 is the same encryption standard used by governments and financial institutions. A properly encrypted PDF with a strong password (12+ random characters including uppercase, lowercase, numbers, and symbols) is effectively unbreakable with current technology. A PDF encrypted with a weak password like "password123" or "document" can be cracked in minutes using brute-force or dictionary attacks.

Your password strength matters more than the encryption algorithm. Using "MyD0cument$2025!" is far more secure than "password" regardless of whether the file uses 128-bit or 256-bit encryption. Use a password manager to generate and store strong passwords for your PDFs.

What Password Protection Does NOT Protect Against

PDF password encryption is important, but it has limits that you should understand:

• Screenshots: Someone who opens the PDF with the password can take screenshots of every page. Encryption does not prevent this.
• Photography: A person can take a photo of the screen displaying the PDF. No encryption prevents analog copying.
• Memory dumps: The decrypted PDF content exists in the computer's RAM while the file is open. Skilled attackers with physical access to the machine can extract it.
• Social engineering: If you give someone the password, they can share it with others. Password protection controls access to the file, not the behavior of authorized users.

How to Remove a Password from a PDF

If you have the password and want to remove it from a PDF you own, you have a few options:

• Mac Preview: Open the PDF (enter the password), go to File > Export, and uncheck "Encrypt." Save a new copy without a password.
• Adobe Acrobat Pro: Open the PDF, go to Tools > Protect > Encrypt > Remove Security.
• Print to PDF: Open the PDF, print it using the "Print to PDF" or "Save as PDF" printer option. The resulting file will not have a password (but will lose any fillable form fields, annotations, or digital signatures).

Note: It is illegal to remove password protection from a PDF that you do not own or do not have authorization to modify. Only remove passwords from your own documents.

PDF Security — Other Tools You Might Need

Password protection is just one PDF workflow step. You might also need to merge multiple PDFs into a single secured document, or split a PDF to extract only the pages that need protection. Our free tools handle merging and splitting entirely in your browser, though they currently do not add or remove passwords.

Protect Your PDFs the Right Way

Adding a password to a PDF is a simple, effective way to keep your documents secure. Use Word or Preview for free, use a strong password, and always keep an unencrypted backup copy stored securely. While our tools currently focus on merging and splitting, you can pair them with the methods above for a complete PDF workflow. Try our Merge PDF and Split PDF tools for your other PDF needs.