Protect PDF – Add Password to PDF Free Online
🔒 Free  ·  No Signup  ·  No Watermark  ·  100% Private

Protect PDF File
Add Password to PDF Free

Lock your PDF with a strong password and AES-128 encryption instantly. Control printing, copying, and editing permissions. Works entirely in your browser — your files never leave your device.

PDF
Original PDF
🔒
PDF
Password Protected
100%
Free Forever
0s
Server Upload Time
AES
128-bit Encryption
Permission Control

🔒 PDF Password Protector

Upload your PDF, set a strong password, configure permissions, and download your encrypted PDF instantly.

📂 Step 1 — Upload PDF File
🔒
100% Private: Your PDF is never uploaded to any server. All encryption is performed locally in your browser using the PDF-lib library. Your file stays on your device at all times.
📄

Drag & Drop your PDF here

or click to browse files from your device

✅ PDF
🔑 Step 2 — Set Password
💡 Strong Password Tips
Aa Uppercase + Lowercase 123 Numbers !@# Special Characters 8+ Characters
🛡️ Step 3 — Set Permissions

Control what users can do with the PDF after opening it. Checked = allowed.

⬇️ Step 4 — Download Protected PDF
PDF Protected Successfully!
Your PDF has been encrypted and locked with the password below.
🔑  

Four Pillars of a Great
PDF Password Protector

The design principles behind this tool — and what to look for in any PDF protection tool you use.

01

Real Encryption

Files are genuinely encrypted with PDF-lib — not just flagged as protected. The password is required to open the document anywhere.

02

Local Processing

Encryption runs in your browser on-device — your PDF and password never touch a server, so sensitive files stay private.

03

Granular Control

Separate open and owner passwords, plus six permission toggles, let you decide exactly who can do what with the file.

04

Confidence Built In

A live strength meter, match check, and password tips help you set a strong password and avoid accidental lockouts.

The Best Free PDF Password Protector

Secure, private, and fully browser-based — everything you need to lock your PDF files with strong encryption and permission controls.

🔒
100% Private & Secure
Your PDF file is processed entirely in your browser using PDF-lib. It is never sent to any server. Your sensitive documents stay on your device at all times.
🛡️
AES 128 / 256-bit Encryption
Choose between AES-128 (standard), AES-256 (maximum security), or RC4-128 (compatibility mode for older PDF readers). Industry-standard encryption algorithms.
🔑
Open + Owner Passwords
Set an open password so only authorised users can view the document. Optionally set a separate owner password to control who can change permissions or remove protection.
🛠️
Full Permission Control
Restrict printing, copying text, editing content, adding annotations, filling forms, and assembling pages. Choose exactly what recipients are allowed to do.
💪
Real-time Password Strength
Live password strength meter evaluates your password as you type — Weak, Fair, Good, or Strong. Visual tips highlight missing complexity requirements.
Instant Encryption
PDF encryption happens in your browser in seconds using PDF-lib. No server processing or upload wait times. Your protected PDF downloads immediately.
📋
Password Confirmation
Enter your password twice to prevent typos. Live match indicator confirms both entries match before you can protect the file — no accidental lockouts.
👁️
Show / Hide Password
Toggle password visibility on all password fields. Easily verify what you've typed before locking your document — especially useful for complex passwords.
📱
Works on Any Device
Fully responsive design works perfectly on desktop, tablet, and mobile. Protect your PDF files from anywhere, any time, for free — no app to install.
🏷️
Custom Output Filename
Name your protected file before downloading. It auto-fills from your PDF's name with a "-protected" suffix, but you can set anything you like.
🌗
Auto Dark Mode
The interface follows your system theme automatically via prefers-color-scheme — easy on the eyes day or night.
♾️
Unlimited Use
Protect as many PDFs as you want, as often as you want. No daily quotas, no waiting timers, no paywalls — ever.

Password Protect PDF in 4 Steps

From upload to encrypted download in under a minute. No sign-up, no software installation required.

1
Upload Your PDF
Drag and drop your PDF file, or click to browse. Your file is never sent to any server — it stays 100% on your device.
2
Set Your Password
Enter a strong password and confirm it. Use the real-time strength meter to ensure your password is secure enough.
3
Configure Permissions
Choose whether recipients can print, copy, edit, annotate, or fill forms. Full control over what users can do with your PDF.
4
Download Protected PDF
Click "Protect PDF". Your encrypted file downloads instantly — ready to share, email, or store with confidence.

Understanding Your
Protection Options

Each setting shapes how your PDF is locked. Here's what they do and when to use them.

🔐

Open Password

Also called the user password — anyone opening the PDF must type it. This is the core lock that keeps unauthorised people out.

🛡️

Owner Password

The master password controlling permissions. Set it to keep the ability to change restrictions even after sharing the open password.

🔒

AES-128

The standard choice — strong encryption with the broadest reader compatibility. Best for everyday document protection.

💎

AES-256

Maximum strength encryption for highly sensitive material. Use it when security matters more than supporting very old readers.

🕰️

RC4-128

A legacy algorithm for compatibility with very old PDF software. Only choose it if a recipient's reader can't handle AES.

🛠️

Permissions

Six toggles — print, copy, modify, annotate, fill forms, assemble — let you allow or block specific actions after the PDF is opened.

Rule of thumb: Set a strong open password for any confidential file, keep AES-128 unless you specifically need maximum security, and add an owner password when you want to share a restricted PDF while retaining master control.

What Happens Inside Your
Browser, Step by Step

For the curious: a look at exactly what the tool does between the moment you drop your PDF and the moment your protected file downloads.

📥

1. File read as bytes CLIENT-SIDE

When you drop or pick a PDF, the browser reads it into an ArrayBuffer and then a byte array. The bytes never touch the network — they stay in your tab's memory.

🔍

2. PDF-lib loads the document PARSE

The PDF-lib library opens the byte array and decodes the document's internal structure so it can be re-saved with encryption applied.

🔑

3. Passwords validated VALIDATE

The tool confirms your open password is present and matches the confirmation field, preventing typos that could lock you out of your own file.

💪

4. Strength evaluated STRENGTH

As you type, the password is scored on uppercase, lowercase, numbers, symbols, and length, driving the live strength meter and tip indicators.

🛠️

5. Permissions assembled CONFIGURE

Your six permission toggles are mapped into a permissions object — printing, copying, modifying, annotating, form-filling, and assembly.

🛡️

6. Owner password resolved OWNER

If you didn't set a separate owner password, the tool derives one so the permission restrictions are enforced by a master credential.

🔒

7. Encryption applied ENCRYPT

PDF-lib re-saves the document with your user password, owner password, and permissions, producing a genuinely encrypted PDF.

📦

8. Output wrapped in a Blob PACKAGE

The encrypted byte stream is wrapped in a Blob with the application/pdf type, ready to be offered as a download.

9. Success shown CONFIRM

A result card confirms the file is protected and displays the password you set, so you can record it before downloading.

💾

10. Protected PDF downloads DOWNLOAD

Click download and the encrypted PDF saves to your device with your chosen filename. Nothing was uploaded at any step.

How PDF Password
Protection Works

Understanding PDF encryption helps you choose the right settings and set expectations about what protection does.

🔐 Two Passwords, Two Jobs

PDF security uses two distinct passwords. The user (open) password is required to open and read the document — without it, the content stays encrypted and unreadable. The owner (permissions) password controls what a reader can do once it's open, and lets the owner change security settings later. You can set either or both.

🛡️ What AES Encryption Means

AES (Advanced Encryption Standard) is the same family of encryption trusted by governments and banks worldwide. AES-128 and AES-256 refer to the key length — both are extremely strong, with 256-bit offering a larger key for the most sensitive material. The encryption scrambles the document's contents so they can only be recovered with the correct password.

📜 Permissions Are Enforced by Readers

The permission flags — print, copy, modify, and so on — are stored in the encrypted PDF and enforced by compliant PDF readers like Adobe Acrobat. They're a powerful deterrent and the standard way to restrict document use, though it's worth knowing that permission enforcement depends on the reader respecting the flags, while the open password is a true cryptographic lock.

🧮 Why Local Encryption Matters

Many online "protect PDF" services upload your file to a server to encrypt it — meaning your unprotected document and chosen password briefly leave your control. This tool encrypts entirely in your browser with PDF-lib, so neither the file nor the password is ever transmitted. For confidential documents, that's a meaningful difference.

⚠️ What Protection Can't Do

Password protection keeps unauthorised people from opening or misusing a document, but it isn't magic. If you forget the password, there's no recovery — the security that keeps others out keeps you out too. And once someone with the password legitimately opens a file, they can read its contents. Protection controls access, not what a trusted recipient does with the information afterward.

PDF Encryption Through the Years

How PDF security evolved from weak early ciphers to the strong AES encryption used today.

1993
PDF 1.0 launches
Adobe introduces the Portable Document Format, soon adding basic security so documents could carry passwords and permissions.
1996
RC4 encryption arrives
Early PDF versions adopt 40-bit, then 128-bit RC4 encryption — adequate for the era but eventually shown to be weak by modern standards.
2001
AES becomes the standard
The US government adopts the Advanced Encryption Standard, the cipher that would later secure PDFs and almost everything else.
2006
AES-128 in PDF
PDF 1.6 / Acrobat 7 introduces AES-128 encryption, a major security upgrade over the aging RC4 cipher.
2008
AES-256 & ISO standard
PDF 1.7 brings AES-256, and PDF is published as the open ISO 32000-1 standard, documenting its security model.
2017
PDF 2.0 refines security
ISO 32000-2 modernises encryption handling, standardising on robust AES-256 for protected documents.
Today
In-browser encryption
Libraries like PDF-lib let browsers encrypt PDFs entirely on-device — strong protection with total privacy. This tool is built that way.

When You'll Want to
Password-Protect a PDF

Locking a PDF keeps confidential content safe in transit and at rest. Here's where it helps most.

📧

Emailing Documents

Lock a PDF before emailing it so only the intended recipient with the password can open it.

🏦

Financial Records

Protect bank statements, tax returns, and invoices that contain sensitive account and personal data.

⚖️

Legal Documents

Encrypt contracts, agreements, and case files so confidential terms stay restricted to authorised parties.

🏥

Medical Records

Lock health records and reports to keep private medical information confidential when shared.

💼

Business Reports

Protect internal reports, financials, and strategy decks before circulating them outside the team.

🆔

ID & Personal Docs

Encrypt scans of passports, IDs, and certificates that you need to send but want to keep secure.

📄

Restricting Printing

Share a document for viewing only by blocking printing and copying with permission controls.

🎓

Exams & Coursework

Protect exam papers and course materials so they can't be edited or redistributed freely.

📑

Confidential Proposals

Lock client proposals and quotes so pricing and terms aren't altered or leaked.

🔬

Research & IP

Protect unpublished research, patents, and intellectual property before sharing with collaborators.

🏢

HR & Payroll

Encrypt salary slips, contracts, and HR documents containing employees' personal details.

📁

Archiving Sensitive Files

Add a password before storing private documents in the cloud or on shared drives.

🤝

NDA Material

Lock documents covered by non-disclosure agreements to reinforce the confidentiality obligation.

📨

Client Deliverables

Send finished work to clients with copy or edit restrictions until final sign-off.

🧾

Receipts & Statements

Protect personal financial documents you keep or forward to an accountant.

🔐

Read-Only Sharing

Distribute a document that recipients can read but not modify, by allowing viewing while blocking editing.

AES-256 vs AES-128 vs RC4-128

Three encryption choices, plus how browser protection compares to server-side tools. Here's how to decide.

Property 💎 AES-256 🔒 AES-128 🕰️ RC4-128
Security strengthMaximumStrongLegacy
Key length256-bit128-bit128-bit
Modern reader supportYesUniversalYes
Very old reader supportLimitedMostBest
Considered secure todayYesYesNo
Best forTop-secret filesEveryday useOld software
Rule of thumb: AES-128 is the sweet spot for almost everyone — strong and universally readable. Step up to AES-256 for highly sensitive material, and only fall back to RC4-128 if a recipient's PDF reader is too old to handle AES.
Property 🖥️ This Tool (Browser) ☁️ Server-Side Tools 💻 Desktop Apps
File leaves deviceNeverUploadedNever
Password stays localYesSentYes
Install requiredNoNoYes
CostFreeOften paidOften paid
Works offlineAfter loadNoYes

12 Tips for Protecting PDFs Well

Small choices that make a real difference to how secure and usable your protected PDF is.

Use a long, mixed password

Aim for the Strong rating: mix upper and lower case, numbers, and symbols, with at least 8 characters. Length matters most.

Save the password somewhere safe

There's no recovery if you forget it. Store it in a password manager before you lock and share the file.

Confirm before you protect

Watch the live match indicator turn green — a mismatched confirmation is the easiest way to lock yourself out.

Use an owner password too

Set a separate owner password when you want to keep the ability to change permissions after sharing the open password.

Pick AES-128 by default

It's strong and universally compatible. Reserve AES-256 for genuinely sensitive files and RC4 for ancient readers only.

Restrict only what you need

Leave printing and copying on unless you have a reason to block them — over-restricting frustrates legitimate recipients.

Share the password separately

Never send the password in the same email as the PDF. Use a different channel like a text or call.

Verify with the show button

Toggle visibility to double-check a complex password before locking — typos here are costly.

Name the output clearly

Keep the "-protected" suffix or set a clear filename so you don't confuse the locked copy with the original.

Keep an unprotected backup

Store a safe copy of the original so you're never dependent on remembering the password to access your own content.

Test the protected file

Open the downloaded PDF and confirm it asks for the password and your permissions behave as expected before sharing.

Avoid reused passwords

Don't protect a document with a password you use elsewhere. Use a unique one per sensitive file.

Who Password-Protects PDFs Most?

Locking confidential documents is routine work across many fields that handle sensitive information.

⚖️

Legal Teams

Encrypt contracts, agreements, and case files so confidential terms stay with authorised parties only.

🏦

Finance & Accounting

Protect statements, tax documents, and reports packed with sensitive financial data.

🏥

Healthcare

Lock patient records and medical reports to keep private health information confidential.

🏢

HR Departments

Encrypt salary slips, contracts, and personnel files holding employees' personal details.

💼

Consultants

Protect proposals, deliverables, and client reports before sending them out.

🔬

Researchers

Lock unpublished findings, IP, and patents before sharing with collaborators.

🎓

Educators

Protect exam papers and course materials so they can't be edited or freely redistributed.

🏛️

Government

Encrypt official documents and records that require restricted, controlled distribution.

🏗️

Architects & Engineers

Protect plans and technical drawings shared with clients and contractors.

📰

Journalists

Lock sensitive source documents and drafts before transmitting them securely.

🛡️

Insurance

Encrypt policy documents and claims containing personal and financial information.

🏠

Real Estate

Protect deals, contracts, and client paperwork with confidential terms and personal data.

How Your PDF Is Handled

For a security tool, privacy matters most of all. Here's exactly what happens when you use this protector.

🔐 Files Are Encrypted In Your Browser

This tool uses the PDF-lib library to encrypt your PDF entirely inside your browser tab. Your file is read from your device, locked in memory, and the protected version is handed back to you for download — without ever being uploaded to a server. Your password is never transmitted either.

That's especially important for a security tool: an online protector that uploads your file means your unprotected document and chosen password briefly leave your control. Here, neither does.

🛡️ What You Can Still Watch Out For

Although the encryption logic is local, modern websites do receive normal browser metadata such as your IP address, user agent, and referrer. If you're protecting highly sensitive material, it's always smart to verify how a tool behaves. You can open your browser's developer tools and inspect the Network tab while protecting a file to confirm nothing is being sent externally.

For background reading on encryption and safe handling of personal files, see the Electronic Frontier Foundation's privacy resources.

🧹 Nothing Stored After You Leave

When you close the tab or clear the file, the document bytes and your password are discarded automatically. There's no account, no cloud storage, no history. Record your password somewhere safe and save your protected PDF before closing the tab.

🔎 Verify It Yourself

Don't take our word for it. Press F12 (or Cmd+Option+I on Mac) to open developer tools, switch to the Network tab, then upload a PDF and protect it. You'll see the page's own assets loading, but no outbound request carrying your PDF or password — the hallmark of a true client-side tool.

What Each Permission Controls

A quick reference for the six permission toggles, so you know exactly what you're allowing or blocking.

Permission When Checked (Allowed) When Unchecked (Blocked) Default
🖨️ PrintingRecipients can print the documentPrinting is disabled in compliant readersAllowed
📋 Copy TextText and images can be selected and copiedCopying to the clipboard is blockedAllowed
✏️ Modify ContentThe PDF's content can be editedEditing the document is preventedBlocked
💬 AnnotationsComments and notes can be addedAdding annotations is disabledBlocked
📝 Fill FormsForm fields can be filled inForm filling is disabledBlocked
📑 AssemblePages can be inserted, rotated, or deletedPage assembly is preventedBlocked
Pro tip: For a read-only handout, leave Printing on but block Modify, Annotations, Forms, and Assemble. For a fully locked-down file, block everything except what the recipient genuinely needs.
Heads-up: Permission flags are enforced by the PDF reader, so they're a strong deterrent rather than an absolute barrier. The open password, by contrast, is a true cryptographic lock on the whole document.

8 PDF Protection Myths — Debunked

A lot of confusion surrounds PDF passwords and encryption. Here are the most common myths and the truth.

Myth

"A forgotten password can be recovered."

Truth

There's no recovery for a lost PDF password — that's what makes it secure. Always store it safely before locking the file.

Myth

"Online protectors must upload my file."

Truth

Some do, but this one encrypts entirely in your browser with PDF-lib. Confirm it in the DevTools Network tab in seconds.

Myth

"AES-128 is weak."

Truth

AES-128 is extremely strong and trusted worldwide. AES-256 adds a longer key for top-secret material, but 128 is plenty for most.

Myth

"Permissions can't be bypassed."

Truth

Permission flags rely on the reader honouring them. The open password is the true lock; permissions are a strong deterrent.

Myth

"Protecting changes the file's content."

Truth

Encryption wraps the document; the pages, text, and images inside are unchanged — they're just locked behind a password.

Myth

"This adds a watermark."

Truth

No watermark or branding is ever added. Your protected PDF is clean — just encrypted and locked with your password.

Myth

"Owner and open passwords are the same."

Truth

The open password unlocks viewing; the owner password controls permissions. They serve different purposes and can differ.

Myth

"Protected PDFs won't open in some readers."

Truth

AES-encrypted PDFs open in Acrobat, Reader, Preview, Chrome, and all modern viewers — they simply prompt for the password.

Common PDF Protection Issues

If something doesn't work the way you expected, one of these is usually the cause.

🚫 "The Protect button is greyed out"

You haven't uploaded a file or entered a password yet. Fix: upload a PDF, then type a password and confirmation — the button enables once a file is loaded.

"Passwords do not match"

The two password fields differ. Fix: re-type the confirmation carefully, or use the show/hide toggle to verify both entries are identical before protecting.

🔁 "Encryption failed — the PDF may already be encrypted"

The source file is already password-protected or corrupted. Fix: remove existing protection first, or try a clean copy of the original PDF.

🔑 "I forgot the password I set"

There's no way to recover it — that's by design. Fix: use your unprotected backup of the original and protect it again with a password you record this time.

🖨️ "Recipient can still print despite blocking it"

Permission flags depend on the reader honouring them. Fix: for stronger control, rely on the open password to restrict who can access the file at all.

📂 "The download didn't start"

A browser pop-up or download blocker may have intercepted it. Fix: allow downloads for this site, then click the Download Protected PDF button again.

🐌 "Large PDFs are slow to encrypt"

Big files take longer to process in the browser. Fix: let the progress bar finish, and close other heavy tabs to free memory on lower-powered devices.

📱 "It won't open on an old reader"

Very old PDF software may not support AES. Fix: re-protect the file using the RC4-128 compatibility option for legacy readers.

More Free PDF Tools

Explore more free browser-based PDF tools for all your document needs.

PDF to PNG PDF to JPG PDF to Text PNG to PDF PPT to PDF PDF to TIFF PDF to XML PDF to RTF Organize PDF Pages Merge PDFs

PDF Security Terms Explained

Short, friendly definitions for the terms you'll meet when protecting PDFs.

Encryption
Scrambling a document's contents so they can only be read with the correct password or key.
AES
Advanced Encryption Standard — the strong, government-trusted cipher used to lock the PDF.
AES-128
AES with a 128-bit key — strong and the most widely compatible choice for PDFs.
AES-256
AES with a 256-bit key — maximum strength, for the most sensitive documents.
RC4
An older cipher offered for compatibility with very old PDF readers; weaker than AES.
Open Password
The user password required to open and view the PDF. Without it, the file stays locked.
Owner Password
The master password that controls permissions and can change the document's security settings.
Permissions
Flags that allow or block actions like printing, copying, and editing after the PDF is opened.
Key Length
The size of the encryption key in bits — longer keys (256 vs 128) are harder to break.
Cipher
The algorithm used to encrypt and decrypt data, such as AES or RC4.
PDF-lib
The open-source JavaScript library that performs the encryption in your browser.
Password Strength
A measure of how hard a password is to guess, based on length and character variety.
Client-Side
Processing that happens in your browser rather than on a remote server.
Blob
A browser-native object holding binary data; the protected PDF is wrapped in one for download.
Decryption
Reversing encryption with the correct password to make the document readable again.
Brute Force
Trying every possible password until one works — why long, complex passwords matter.
User vs Owner
The two PDF password roles: user opens the file, owner controls its permissions.
Permission Flag
A single on/off setting in the PDF that a reader checks before allowing an action.
FIPS 197
The US standard document that formally defines the AES encryption algorithm.
Password Manager
Software that securely stores passwords so you never lose access to a protected file.

PDF Password Protection — FAQs

Everything you need to know about adding password protection to PDF files.

Is this PDF password protector really free?
Yes, 100% free with no hidden fees, no subscription, and no signup required. Use it as many times as you need, with any PDF file, completely free forever.
Is my PDF uploaded to a server?
No. This tool runs entirely in your browser using PDF-lib. Your PDF file is never sent to any server — all encryption happens locally on your own device. Total privacy.
What is the difference between Open and Owner passwords?
The Open password (also called User password) is required to view the PDF. The Owner password (also called Permissions password) controls who can change security settings or override restrictions — useful when you want to share a restricted PDF but retain master control.
Which encryption level should I use?
AES-128 is the best balance of security and compatibility. AES-256 provides maximum security and is recommended for highly sensitive documents. RC4-128 is for compatibility with very old PDF readers (pre-2004).
Will the protected PDF work in all PDF readers?
Yes. The AES-128 encrypted output is compatible with Adobe Acrobat, Adobe Reader, Foxit, Chrome's built-in PDF viewer, macOS Preview, and virtually all modern PDF reading software.
What if I forget the password I set?
There is no way to recover a forgotten PDF password — this is by design as it ensures your security. Always save your password in a secure password manager before locking your PDF.
Does protecting the PDF change its content?
No. Encryption wraps the document — the pages, text, and images inside stay exactly the same. They're simply locked behind your password.
Can I set different permissions for different people?
Permissions apply to the document as a whole, not per person. Anyone who opens it with the password is subject to the same permission settings you chose.
Are the permission restrictions unbreakable?
Permission flags are enforced by the PDF reader, so they're a strong deterrent rather than an absolute barrier. The open password, by contrast, is a true cryptographic lock on the whole file.
Can I protect a PDF that's already encrypted?
No. You'll need to remove the existing protection first, then upload the unprotected copy to apply a new password.
Do I need an owner password?
It's optional. If you leave it blank, the tool derives one automatically so the permission restrictions are enforced. Set your own if you want to retain master control yourself.
How strong should my password be?
Aim for the Strong rating — mix uppercase, lowercase, numbers, and symbols, with at least 8 characters. The live strength meter guides you as you type.
Can I change the settings and protect again?
Yes. Use "Protect Another PDF" or adjust the password, encryption, and permissions, then protect again. The original stays loaded until you clear it.
Is there a file size limit?
There's no hard limit — your device's memory is the practical ceiling. Very large PDFs simply take a little longer to encrypt in the browser.
Does it work offline?
After the page loads once, PDF-lib is cached, so protection usually works on flaky connections. The first visit needs internet to load the library.
What browsers are supported?
All modern Chromium browsers (Chrome, Edge, Brave, Arc, Opera), Firefox, and Safari versions from the past few years work smoothly.
Will my original PDF be changed?
No. The tool reads your PDF and produces a new, encrypted copy. Your original file on disk is never modified.
Can I remove the password later?
Yes, with an unlock/remove-password tool and the correct password. Keep your password safe so you can unlock the file when needed.
Should I send the password with the file?
No. Always share the password through a separate channel — a text or call — rather than in the same email as the protected PDF.
Can I use protected PDFs commercially?
Yes. The protected file is built from your own PDF, so you can use and share it however you like. The tool adds no restrictions, branding, or watermarks.