Why Password-Protect a PDF?

Encryption prevents unauthorised access to document content. Common use cases include:

• Confidential contracts — protect terms from being forwarded to unintended parties
• HR documents — salary letters, performance reviews, offer letters
• Financial statements — bank statements, tax returns, audit reports
• Legal filings — drafts shared between counsel before public filing
• Intellectual property — research reports, proprietary methodologies

AES-256: What It Means

AES-256 (Advanced Encryption Standard with 256-bit keys) is the encryption standard used by governments, banks, and the US military for classified documents. A 256-bit key has 2²⁵⁶ possible combinations — more than the estimated number of atoms in the observable universe. With a strong password, AES-256 is computationally infeasible to crack.

PDF encryption uses AES-256 to encrypt the entire document stream. Even if someone obtains the file, they cannot read its contents without the correct password.

Open Password vs Owner Password

PDF supports two separate password types that serve different purposes:

• Open (User) Password — required to open and view the document. Anyone without this password sees only an encrypted file they cannot read.
• Owner Password — controls document permissions. With an owner password set, you can restrict printing, copying text, and editing without preventing the document from being viewed.

You can set one, both, or neither. Setting only an owner password allows viewing but restricts editing. Setting only an open password requires the password to open the document at all.

Permission Restrictions Explained

• No printing — recipient can read on-screen but the print function is disabled
• No copying — text cannot be selected or copied to clipboard
• No editing — annotations, form fills, and content changes are disabled
• No extracting pages — pages cannot be extracted to a new document

Note: permission restrictions require an owner password to enforce. Without an owner password, any PDF editor can remove the restrictions.

How to Choose a Strong Password

The strength of AES-256 protection is only as good as your password. Weak passwords are vulnerable to dictionary attacks. Use a password that is:

• At least 12 characters long
• A mix of uppercase, lowercase, numbers, and symbols
• Not a dictionary word or predictable phrase
• Unique to this document (not reused from another account)

Example of a strong password: Tr0$t-F4lc0n#82! — long, mixed-character, unpredictable.

After Protecting: What to Share

Share the password through a different channel than the document itself. If you send the PDF by email, send the password by SMS, phone, or a separate secure message. A password sent in the same email as the encrypted document provides no real security.

To later remove the protection, use our Unlock PDF tool with the same password.