Drag & Drop your PDF here
or click to browse files from your device
Control what users can do with the PDF after opening it. Checked = allowed.
Lock your PDF with a strong password and AES-128 encryption instantly. Control printing, copying, and editing permissions. Works entirely in your browser — your files never leave your device.
Upload your PDF, set a strong password, configure permissions, and download your encrypted PDF instantly.
Drag & Drop your PDF here
or click to browse files from your device
Control what users can do with the PDF after opening it. Checked = allowed.
The design principles behind this tool — and what to look for in any PDF protection tool you use.
Files are genuinely encrypted with PDF-lib — not just flagged as protected. The password is required to open the document anywhere.
Encryption runs in your browser on-device — your PDF and password never touch a server, so sensitive files stay private.
Separate open and owner passwords, plus six permission toggles, let you decide exactly who can do what with the file.
A live strength meter, match check, and password tips help you set a strong password and avoid accidental lockouts.
Secure, private, and fully browser-based — everything you need to lock your PDF files with strong encryption and permission controls.
prefers-color-scheme — easy on the eyes day or night.From upload to encrypted download in under a minute. No sign-up, no software installation required.
Each setting shapes how your PDF is locked. Here's what they do and when to use them.
Also called the user password — anyone opening the PDF must type it. This is the core lock that keeps unauthorised people out.
The master password controlling permissions. Set it to keep the ability to change restrictions even after sharing the open password.
The standard choice — strong encryption with the broadest reader compatibility. Best for everyday document protection.
Maximum strength encryption for highly sensitive material. Use it when security matters more than supporting very old readers.
A legacy algorithm for compatibility with very old PDF software. Only choose it if a recipient's reader can't handle AES.
Six toggles — print, copy, modify, annotate, fill forms, assemble — let you allow or block specific actions after the PDF is opened.
For the curious: a look at exactly what the tool does between the moment you drop your PDF and the moment your protected file downloads.
When you drop or pick a PDF, the browser reads it into an ArrayBuffer and then a byte array. The bytes never touch the network — they stay in your tab's memory.
The PDF-lib library opens the byte array and decodes the document's internal structure so it can be re-saved with encryption applied.
The tool confirms your open password is present and matches the confirmation field, preventing typos that could lock you out of your own file.
As you type, the password is scored on uppercase, lowercase, numbers, symbols, and length, driving the live strength meter and tip indicators.
Your six permission toggles are mapped into a permissions object — printing, copying, modifying, annotating, form-filling, and assembly.
If you didn't set a separate owner password, the tool derives one so the permission restrictions are enforced by a master credential.
PDF-lib re-saves the document with your user password, owner password, and permissions, producing a genuinely encrypted PDF.
The encrypted byte stream is wrapped in a Blob with the application/pdf type, ready to be offered as a download.
A result card confirms the file is protected and displays the password you set, so you can record it before downloading.
Click download and the encrypted PDF saves to your device with your chosen filename. Nothing was uploaded at any step.
Understanding PDF encryption helps you choose the right settings and set expectations about what protection does.
PDF security uses two distinct passwords. The user (open) password is required to open and read the document — without it, the content stays encrypted and unreadable. The owner (permissions) password controls what a reader can do once it's open, and lets the owner change security settings later. You can set either or both.
AES (Advanced Encryption Standard) is the same family of encryption trusted by governments and banks worldwide. AES-128 and AES-256 refer to the key length — both are extremely strong, with 256-bit offering a larger key for the most sensitive material. The encryption scrambles the document's contents so they can only be recovered with the correct password.
The permission flags — print, copy, modify, and so on — are stored in the encrypted PDF and enforced by compliant PDF readers like Adobe Acrobat. They're a powerful deterrent and the standard way to restrict document use, though it's worth knowing that permission enforcement depends on the reader respecting the flags, while the open password is a true cryptographic lock.
Many online "protect PDF" services upload your file to a server to encrypt it — meaning your unprotected document and chosen password briefly leave your control. This tool encrypts entirely in your browser with PDF-lib, so neither the file nor the password is ever transmitted. For confidential documents, that's a meaningful difference.
Password protection keeps unauthorised people from opening or misusing a document, but it isn't magic. If you forget the password, there's no recovery — the security that keeps others out keeps you out too. And once someone with the password legitimately opens a file, they can read its contents. Protection controls access, not what a trusted recipient does with the information afterward.
How PDF security evolved from weak early ciphers to the strong AES encryption used today.
Locking a PDF keeps confidential content safe in transit and at rest. Here's where it helps most.
Lock a PDF before emailing it so only the intended recipient with the password can open it.
Protect bank statements, tax returns, and invoices that contain sensitive account and personal data.
Encrypt contracts, agreements, and case files so confidential terms stay restricted to authorised parties.
Lock health records and reports to keep private medical information confidential when shared.
Protect internal reports, financials, and strategy decks before circulating them outside the team.
Encrypt scans of passports, IDs, and certificates that you need to send but want to keep secure.
Share a document for viewing only by blocking printing and copying with permission controls.
Protect exam papers and course materials so they can't be edited or redistributed freely.
Lock client proposals and quotes so pricing and terms aren't altered or leaked.
Protect unpublished research, patents, and intellectual property before sharing with collaborators.
Encrypt salary slips, contracts, and HR documents containing employees' personal details.
Add a password before storing private documents in the cloud or on shared drives.
Lock documents covered by non-disclosure agreements to reinforce the confidentiality obligation.
Send finished work to clients with copy or edit restrictions until final sign-off.
Protect personal financial documents you keep or forward to an accountant.
Distribute a document that recipients can read but not modify, by allowing viewing while blocking editing.
Three encryption choices, plus how browser protection compares to server-side tools. Here's how to decide.
| Property | 💎 AES-256 | 🔒 AES-128 | 🕰️ RC4-128 |
|---|---|---|---|
| Security strength | Maximum | Strong | Legacy |
| Key length | 256-bit | 128-bit | 128-bit |
| Modern reader support | Yes | Universal | Yes |
| Very old reader support | Limited | Most | Best |
| Considered secure today | Yes | Yes | No |
| Best for | Top-secret files | Everyday use | Old software |
| Property | 🖥️ This Tool (Browser) | ☁️ Server-Side Tools | 💻 Desktop Apps |
|---|---|---|---|
| File leaves device | Never | Uploaded | Never |
| Password stays local | Yes | Sent | Yes |
| Install required | No | No | Yes |
| Cost | Free | Often paid | Often paid |
| Works offline | After load | No | Yes |
Small choices that make a real difference to how secure and usable your protected PDF is.
Aim for the Strong rating: mix upper and lower case, numbers, and symbols, with at least 8 characters. Length matters most.
There's no recovery if you forget it. Store it in a password manager before you lock and share the file.
Watch the live match indicator turn green — a mismatched confirmation is the easiest way to lock yourself out.
Set a separate owner password when you want to keep the ability to change permissions after sharing the open password.
It's strong and universally compatible. Reserve AES-256 for genuinely sensitive files and RC4 for ancient readers only.
Leave printing and copying on unless you have a reason to block them — over-restricting frustrates legitimate recipients.
Never send the password in the same email as the PDF. Use a different channel like a text or call.
Toggle visibility to double-check a complex password before locking — typos here are costly.
Keep the "-protected" suffix or set a clear filename so you don't confuse the locked copy with the original.
Store a safe copy of the original so you're never dependent on remembering the password to access your own content.
Open the downloaded PDF and confirm it asks for the password and your permissions behave as expected before sharing.
Don't protect a document with a password you use elsewhere. Use a unique one per sensitive file.
Locking confidential documents is routine work across many fields that handle sensitive information.
Encrypt contracts, agreements, and case files so confidential terms stay with authorised parties only.
Protect statements, tax documents, and reports packed with sensitive financial data.
Lock patient records and medical reports to keep private health information confidential.
Encrypt salary slips, contracts, and personnel files holding employees' personal details.
Protect proposals, deliverables, and client reports before sending them out.
Lock unpublished findings, IP, and patents before sharing with collaborators.
Protect exam papers and course materials so they can't be edited or freely redistributed.
Encrypt official documents and records that require restricted, controlled distribution.
Protect plans and technical drawings shared with clients and contractors.
Lock sensitive source documents and drafts before transmitting them securely.
Encrypt policy documents and claims containing personal and financial information.
Protect deals, contracts, and client paperwork with confidential terms and personal data.
For a security tool, privacy matters most of all. Here's exactly what happens when you use this protector.
This tool uses the PDF-lib library to encrypt your PDF entirely inside your browser tab. Your file is read from your device, locked in memory, and the protected version is handed back to you for download — without ever being uploaded to a server. Your password is never transmitted either.
That's especially important for a security tool: an online protector that uploads your file means your unprotected document and chosen password briefly leave your control. Here, neither does.
Although the encryption logic is local, modern websites do receive normal browser metadata such as your IP address, user agent, and referrer. If you're protecting highly sensitive material, it's always smart to verify how a tool behaves. You can open your browser's developer tools and inspect the Network tab while protecting a file to confirm nothing is being sent externally.
For background reading on encryption and safe handling of personal files, see the Electronic Frontier Foundation's privacy resources.
When you close the tab or clear the file, the document bytes and your password are discarded automatically. There's no account, no cloud storage, no history. Record your password somewhere safe and save your protected PDF before closing the tab.
Don't take our word for it. Press F12 (or Cmd+Option+I on Mac) to open developer tools, switch to the Network tab, then upload a PDF and protect it. You'll see the page's own assets loading, but no outbound request carrying your PDF or password — the hallmark of a true client-side tool.
A quick reference for the six permission toggles, so you know exactly what you're allowing or blocking.
| Permission | When Checked (Allowed) | When Unchecked (Blocked) | Default |
|---|---|---|---|
| 🖨️ Printing | Recipients can print the document | Printing is disabled in compliant readers | Allowed |
| 📋 Copy Text | Text and images can be selected and copied | Copying to the clipboard is blocked | Allowed |
| ✏️ Modify Content | The PDF's content can be edited | Editing the document is prevented | Blocked |
| 💬 Annotations | Comments and notes can be added | Adding annotations is disabled | Blocked |
| 📝 Fill Forms | Form fields can be filled in | Form filling is disabled | Blocked |
| 📑 Assemble | Pages can be inserted, rotated, or deleted | Page assembly is prevented | Blocked |
A lot of confusion surrounds PDF passwords and encryption. Here are the most common myths and the truth.
There's no recovery for a lost PDF password — that's what makes it secure. Always store it safely before locking the file.
Some do, but this one encrypts entirely in your browser with PDF-lib. Confirm it in the DevTools Network tab in seconds.
AES-128 is extremely strong and trusted worldwide. AES-256 adds a longer key for top-secret material, but 128 is plenty for most.
Permission flags rely on the reader honouring them. The open password is the true lock; permissions are a strong deterrent.
Encryption wraps the document; the pages, text, and images inside are unchanged — they're just locked behind a password.
No watermark or branding is ever added. Your protected PDF is clean — just encrypted and locked with your password.
The open password unlocks viewing; the owner password controls permissions. They serve different purposes and can differ.
AES-encrypted PDFs open in Acrobat, Reader, Preview, Chrome, and all modern viewers — they simply prompt for the password.
If something doesn't work the way you expected, one of these is usually the cause.
You haven't uploaded a file or entered a password yet. Fix: upload a PDF, then type a password and confirmation — the button enables once a file is loaded.
The two password fields differ. Fix: re-type the confirmation carefully, or use the show/hide toggle to verify both entries are identical before protecting.
The source file is already password-protected or corrupted. Fix: remove existing protection first, or try a clean copy of the original PDF.
There's no way to recover it — that's by design. Fix: use your unprotected backup of the original and protect it again with a password you record this time.
Permission flags depend on the reader honouring them. Fix: for stronger control, rely on the open password to restrict who can access the file at all.
A browser pop-up or download blocker may have intercepted it. Fix: allow downloads for this site, then click the Download Protected PDF button again.
Big files take longer to process in the browser. Fix: let the progress bar finish, and close other heavy tabs to free memory on lower-powered devices.
Very old PDF software may not support AES. Fix: re-protect the file using the RC4-128 compatibility option for legacy readers.
Explore more free browser-based PDF tools for all your document needs.
Curated links to authoritative documentation if you want to go deeper into PDF encryption and security.
Short, friendly definitions for the terms you'll meet when protecting PDFs.
Everything you need to know about adding password protection to PDF files.