Guide
How to Password Protect a PDF (Without Uploading It)
How to add a password and AES-256 encryption to a PDF entirely on your own machine. Covers user vs owner passwords, what encryption really protects, and why uploading a confidential file to encrypt it defeats the point.
TL;DR
- Password-protecting a PDF encrypts its contents with AES-256 and requires a password to open it. Without the password the file is unreadable, not merely hidden.
- Free and private: Protect PDF runs qpdf compiled to WebAssembly in your browser — the document and the password never leave your device.
- Think about this before using any online encryption tool: if a service uploads your confidential file to encrypt it, the file has already travelled unencrypted over the internet.
- The user (open) password is what recipients type to read the file. The owner password is an administrative override that governs printing, copying, and editing permissions.
- Permission restrictions are honoured by compliant viewers but are not a hard security boundary. The open password is the part that genuinely protects the content.
- There is no recovery. Forget the password and the file is gone — store it somewhere before you send the PDF.
- Acrobat, Word, macOS Preview, and Smallpdf can all encrypt PDFs too — comparison below.
Password-protecting a PDF is the standard way to send a document that should only be readable by the person you sent it to — a signed contract, a payslip, an ID scan, a board pack. The mechanism is genuine encryption, not a lock icon: without the password, the bytes of the file are meaningless. This guide covers how to do it, what the different password types mean, what encryption does and does not protect, and why the tool you choose matters more here than in almost any other PDF task.
Why the Tool You Choose Matters Here
For most PDF operations, uploading a file to a web service is a matter of preference. For encryption it is close to a contradiction. The reason you are encrypting is that the contents are sensitive — and a server-side encryption tool requires you to send those sensitive contents, unencrypted, over the internet to a machine you do not control, where they sit on disk at least long enough to be processed. The file comes back protected, but the exposure you were trying to prevent has already happened.
Protect PDF avoids this by running qpdf, a mature open-source PDF engine, compiled to WebAssembly and executed inside your browser tab. The file is read from your disk by the page, encrypted in memory, and written straight back to your downloads folder. The password is never transmitted because there is nothing to transmit it to. This is verifiable rather than a promise: open your browser developer tools, switch to the Network tab, and encrypt a file — no request appears.
User Password vs Owner Password
| Password type | What it does | Typical use |
|---|---|---|
| User password (open password) | Required to open and read the document at all. Without it the file cannot be decrypted. | Anything confidential: contracts, financial statements, personal records, anything sent by email. |
| Owner password (permissions password) | Grants full administrative access and overrides permission restrictions. Does not by itself stop anyone opening the file. | Documents meant to be read widely but not printed, copied, or altered — such as a distributed report or a proof. |
| Both together | Recipients need the user password to read, while you keep the owner password for unrestricted access. | Controlled distribution where you also want to retain an editable master. |
If you set only an owner password with restrictions, the document still opens for anyone. That is sometimes exactly what you want, but it is worth being clear that it is a different level of protection from requiring a password to open the file.
How to Password Protect a PDF — Step by Step
- 1
Open the Protect PDF tool
Go to Protect PDF on WeConvertIt. The encryption engine loads into your browser — nothing is uploaded at any point.
- 2
Drop in the PDF
Drag the file onto the upload area or click to browse. Finish every other edit first: once the file is encrypted, it cannot be compressed, merged, or filled until it is unlocked again.
- 3
Set the open password
Choose a long passphrase rather than a short password — AES-256 is only as strong as what it is derived from. Store it in a password manager now, because there is no recovery if you lose it.
- 4
Optionally add an owner password and permissions
Add a separate owner password if you want an administrative override, and use the toggles to deny printing, copying, or modification.
- 5
Encrypt and download
Click Lock with AES-256. The protected file downloads immediately. Open it in any PDF viewer to confirm it prompts for the password.
- 6
Send the password separately
Do not email the password in the same message as the file. Send it by text, phone, or a different channel — otherwise one intercepted inbox gives up both halves.
What Encryption Does Not Protect Against
- A recipient who shares it. Once someone has the password they have the document, and nothing in the PDF format prevents them forwarding both.
- Content you meant to hide inside the file. A black box drawn over a paragraph still has the paragraph underneath it — use Redact PDF to remove it properly, before encrypting.
- Metadata. Author names, software details, and revision history can persist in document properties even when the content is encrypted at rest.
- A weak password. This is the most common real-world failure by a wide margin. A dictionary word or a birthdate undoes the entire cipher.
- Permission flags being ignored. Denying printing or copying relies on the viewer honouring the setting; treat it as a deterrent rather than a guarantee.
Encryption Tools Compared
| Tool | Cost | Where encryption happens | Notes |
|---|---|---|---|
| Protect PDF (WeConvertIt) | Free, no account | In your browser | AES-256 via qpdf, user and owner passwords, permission toggles. Nothing transmitted. No certificate-based or policy-server encryption. |
| Adobe Acrobat Pro | Paid subscription | On your machine | The most capable option by some distance: certificate-based encryption for named recipients, security policies, and integration with enterprise rights management. Worth it if you are protecting documents at organisational scale. |
| Microsoft Word | Part of Office | On your machine | When exporting to PDF, choose Options and tick Encrypt the document with a password. Convenient if the document started life in Word, with no permission controls. |
| macOS Preview | Free, built in | On your machine | File, then Export, then tick Encrypt. Simple and local; offers an open password only, with no permission settings. |
| Smallpdf / iLovePDF | Free tier, then paid | On their servers | They work and they are easy, but your unencrypted document is uploaded to do it — the trade-off that matters most in this particular task. |
Do Your Other Edits First
Encryption should be the last step in your workflow, because an encrypted PDF is deliberately opaque to every other tool. Merge the documents, compress the result, fill in any forms, sign it with Sign PDF, redact what needs removing — and only then apply the password. If you encrypted too early, Unlock PDF will decrypt it again so long as you know the password.
Frequently Asked Questions
How do I password protect a PDF for free?
Use Protect PDF: drop in the file, set an open password, optionally restrict printing or copying, and download the encrypted result. It is free with no account and no upload — the encryption happens in your browser. If you created the document in Word, you can also tick Encrypt with Password in the Save as PDF options, and on a Mac, Preview offers the same thing under File then Export with Encrypt checked.
How do I password protect a PDF without Adobe Acrobat?
You do not need Acrobat at all — PDF encryption is part of the PDF standard, so any tool that implements it produces a file every viewer can open. Protect PDF uses qpdf, the same open-source engine used across the industry, running locally in your browser. Word, LibreOffice, and macOS Preview can all export password-protected PDFs as well.
Is it safe to password protect a PDF online?
It depends on where the encryption happens, and this is the one question worth asking. If the site uploads your file, encrypts it on a server, and sends it back, then the unprotected document has already crossed the internet and sat on someone else’s disk — which rather undermines the reason you wanted it encrypted. Protect PDF does the work inside your browser tab: open DevTools, watch the Network panel while you encrypt, and you will see no upload request at all.
What encryption does a password-protected PDF use?
Modern PDF encryption uses AES-256, the same symmetric cipher used for government and financial data. The key is derived from the password you choose, which means the real strength of the protection is the strength of that password — AES-256 with the password "1234" is not meaningfully protected. Use a long passphrase, and send it to your recipient through a different channel than the file itself.
What is the difference between the user password and the owner password?
The user password (sometimes called the open or document password) is required to open and read the file. The owner password is an administrative one: it grants full access regardless of the permission restrictions set on the document. A common pattern is to set only an owner password with printing disabled, so anyone can read the PDF but not print it — though as noted below, that restriction depends on the viewer choosing to honour it.
Can I stop someone printing or copying text from my PDF?
You can set permission flags that deny printing, copying, or modification, and mainstream viewers such as Acrobat and Preview respect them. Be realistic about what that achieves: the flags are instructions to the viewer, not cryptographic enforcement, and software that ignores them exists. Treat permissions as a way to signal intent and prevent casual copying, and treat the open password as the part that actually secures the content.
How do I remove a password from a PDF?
If you know the password, Unlock PDF will decrypt the file and give you an unprotected copy — useful when you need to compress, merge, or edit it, since none of those operations work on an encrypted document. If you do not know the password, there is no legitimate way to open it; that is the point of encryption.
What happens if I forget the PDF password?
The file is unrecoverable. AES-256 cannot be reversed without the key, there is no backdoor, and no support team can reset it — including ours, since we never see your file or your password in the first place. Save the password in a password manager before you share the document.
Does password protection hide the content I blacked out?
No, and this is a costly mistake. Drawing a black rectangle over text in an editor leaves the original text in the file underneath, where anyone can select and copy it once the PDF is open. Encryption protects the whole file from being opened; it does nothing about content inside a file the recipient is meant to read. To remove sensitive content for real, use Redact PDF, which deletes the underlying content rather than covering it.