Protect PDF Files Online – Add Password Security

A PDF without a password is an open door. Anyone who intercepts the file — through a forwarded email, a shared cloud link, or a lost USB drive — can read every word instantly. Password-protecting a PDF with AES-256 encryption closes that door permanently. This guide shows you exactly how to do it for free on any device, including a method that never sends your file to any server at all.

Why Protect Your PDF With a Password?

Password protection is not just for top-secret documents. Any PDF containing personal, financial, legal, or business information deserves encryption before it is shared. Here are the most common and important use cases:

📋

Contracts & Agreements

Legal contracts, NDAs, and employment agreements contain sensitive terms. Lock them so only the intended party can open and review them.

💰

Financial Documents

Bank statements, tax returns, invoices, and salary slips should never travel unprotected via email or cloud storage.

🏥

Medical Records

Health reports, prescriptions, and insurance documents are among the most sensitive personal files — always encrypt before sharing.

🎓

Academic & Research

Dissertations, research papers, and exam results shared ahead of publication or grading need protection from unauthorised access.

🏢

Business Proposals

Client pitches, pricing proposals, and strategy documents contain competitive information that should only reach the intended recipient.

🪪

Identity Documents

Passport scans, driving licence copies, and national ID documents shared for KYC or onboarding must always be encrypted.

Understanding PDF Encryption Types

Before picking a tool, it helps to know what "PDF password protection" actually means technically — so you can choose the right level of security for your document:

🔒 PDF Encryption Reference Guide

AES‑256

AES-256 Encryption — Highest Standard

256-bit Advanced Encryption Standard. Used by governments and military. With current computing power, brute-forcing an AES-256 password would take longer than the age of the universe. Supported by ProPDFMaker, Adobe Acrobat Pro, PDF24, and Microsoft Word.

AES‑128

AES-128 Encryption — Strong, Widely Supported

128-bit encryption — still considered extremely secure for everyday use. Slightly less resistant than AES-256 but fully sufficient for personal, business, and most legal documents. Used by Smallpdf and iLovePDF on their free tiers.

Open Password

Open Password (User Password)

Blocks anyone from opening or viewing the PDF without the correct password. The most common type — use this to prevent unauthorised access to the document contents entirely.

Permissions Password

Permissions Password (Owner Password)

Allows the PDF to be opened and viewed without a password, but restricts specific actions: printing, copying text, editing, or extracting pages. Use this for documents you distribute widely but don't want modified — like official reports, certificates, or branded content.

💡

Which Should You Use?

For most use cases — contracts, financial docs, medical records — use an Open Password with AES-256. This fully blocks access to anyone without the password. If you are distributing a report or certificate that others should read but not edit or print, combine both: an Open Password for authorised recipients plus a Permissions Password to prevent modifications.

Method 1 — ProPDFMaker Protect PDF (Zero Upload)

ProPDFMaker — AES-256, Browser-Based, No File Upload

✅ Free 🔒 No Upload 🛡️ AES-256 🌐 Any Device 🏆 Recommended

ProPDFMaker's Protect PDF tool encrypts your PDF with AES-256 entirely inside your browser using the Web Crypto API. Your file is never uploaded to any external server at any stage — the entire encryption process runs locally on your device. This makes it the most private free option available, ideal for sensitive legal, medical, or financial documents. Works on all browsers, Windows, Mac, iPhone, and Android.

Open the ProPDFMaker Protect PDF tool in any browser on any device.
Click Choose File or drag and drop your PDF. The file loads locally — it is never uploaded.
In the Password field, type a strong password (see our password guide below). Re-enter it in the Confirm Password field.
Select protection type: Open Password (blocks viewing) or Permissions Password (blocks editing/printing), or both.
Click Protect PDF — AES-256 encryption runs instantly in your browser.
Click Download Protected PDF to save the encrypted file to your device.

🔐 Protect PDF Now 🔓 Unlock PDF

💡 Zero-upload encryption means your sensitive document — its text, images, and metadata — never travels across the internet during the protection process. This is the only browser-based tool on this list with that guarantee.

Method 2 — Smallpdf Protect PDF (Free, AES-128)

Smallpdf — AES-128 Encryption, No File Size Limit

✅ Free 🌐 Online ⚡ Fast 📱 Mobile OK

Smallpdf's Protect PDF uses AES-128 encryption with TLS-secured file transfers. It is GDPR compliant, ISO/IEC 27001 certified, and permanently deletes all uploaded files within one hour. No file size restrictions and no watermarks on the free tier — making it one of the most popular free PDF protection tools globally, with over 1 million files protected monthly.

Go to smallpdf.com/protect-pdf in your browser.
Click Choose File or drag and drop your PDF into the upload area.
Type a strong password in the password field. Smallpdf recommends at least 7 characters including numbers, capitals, and symbols.
Click Encrypt PDF and wait a few seconds for the file to be processed.
Click Download to save the password-protected PDF to your device.

🚀 Try Smallpdf Free 💳 View Pricing

⚠️

Privacy Consideration

Smallpdf uploads your file to their servers for encryption. For highly sensitive documents — passports, court documents, salary slips — use ProPDFMaker's no-upload tool instead. Smallpdf states files are deleted after 1 hour and all transfers use TLS encryption.

💡 Smallpdf is the best option if you want a dead-simple one-click experience with no settings to configure and no account needed — upload, type a password, download. Done in under 30 seconds.

Method 3 — iLovePDF Protect PDF (Free, Batch & Permissions)

iLovePDF — Basic & Advanced Permissions, No Daily Limit

✅ Free 🌐 Online ⚡ Batch Support 🚫 No Account

iLovePDF's Protect PDF offers both Basic and Advanced modes. Basic mode sets an Open Password in one click. Advanced mode lets you separately configure an Open Password and a Permissions Password — restricting printing, copying, and editing independently. No daily conversion limit and batch protection for multiple files is fully supported on the free plan.

Basic Protection (Open Password Only):

Visit ilovepdf.com/protect-pdf.
Click Select PDF file — or drag multiple files for batch protection.
In the right panel, type your password under Set a password to protect your PDF file. iLovePDF shows a real-time password strength guide: requires lowercase + uppercase + number + special character + 8+ characters.
Click Protect PDF and download the result.

Advanced Protection (Open + Permissions Passwords):

Click the Advanced tab in the right panel.
Enter both an Open Password (required to view) and a Permissions Password (required to change restrictions).
Toggle individual permissions: allow/block printing, allow/block copying text, allow/block editing.
Click Protect PDF and download the fully secured PDF.

🚀 Try iLovePDF Free 💳 View Pricing ℹ️ All Tools

💡 iLovePDF's real-time password strength checker (requiring lowercase, uppercase, number, special character, and 8+ characters) is one of the most helpful guides for building a truly strong PDF password of any free tool.

Method 4 — PDF24 Protect PDF (Free, Online & Offline)

PDF24 — Free, No Limits, Windows Desktop App Available

✅ Free 🌐 Online 💻 Desktop App 🪟 Windows 🚫 No Registration

PDF24's Protect PDF tool is 100% free with no watermarks, no file size limits, and no registration required. It works as both an online tool (any browser) and as a free Windows desktop app that processes files entirely offline. The desktop version supports AES 128-bit and AES 256-bit encryption with individual permission controls.

Using PDF24 Online:

Go to tools.pdf24.org/en/lock-pdf.
Upload your PDF using the file selection box or drag and drop.
Enter your password and adjust any permission settings (printing, copying, editing).
Click Create protected PDF and then download the encrypted file.

Using PDF24 Desktop App (Windows, fully offline):

Download the free PDF24 Creator app for Windows.
Open PDF24 → select Protect PDF from the tools panel.
Import your PDF and choose encryption strength: AES 128-bit or AES 256-bit.
Set your Open Password and configure permissions (restrict printing, editing, extracting). Click Encrypt and Save.

🚀 Try PDF24 Online ⬇️ Download Desktop App

💡 PDF24 Desktop's batch encryption feature lets you import an entire folder of PDFs and encrypt them all at once with the same password and settings — unmatched for processing large volumes of documents without any subscription or internet connection.

Method 5 — Adobe Acrobat Pro (Most Granular Control)

Adobe Acrobat Pro — Full AES-256 with Granular Permissions

🛡️ AES-256 💻 Desktop 🪟 Win 🍎 Mac

Adobe Acrobat Pro is the industry benchmark for PDF security — it provides AES-256 encryption, granular permission controls, certificate-based encryption, and digital rights management. While it requires a paid subscription, the Adobe Acrobat online free tool allows basic password protection without a subscription. The full desktop app gives you every control possible over PDF security.

Quick Protection via Adobe Acrobat Pro Desktop:

Open your PDF in Adobe Acrobat Pro.
Click File → Protect Using Password (or Tools → Protect → Protect Using Password).
Select Viewing to set an Open Password, or Editing to set a Permissions Password.
Type and re-type your password. Watch the real-time strength indicator and aim for Strong or Best rating.
Click Apply and then File → Save to save the protected PDF.

Advanced Security — Password Security Settings:

Go to File → Properties → Security tab → select Password Security from the dropdown.
Tick Require a password to open the document and enter your password.
Under Permissions, set a separate Permissions Password and individually configure allowed printing resolution, content copying, page extraction, and commenting.
Select AES-256-bit from the Encryption Level dropdown for maximum security.
Click OK, confirm both passwords, then save the file.

🚀 Try Adobe Free Tool 💳 Acrobat Pricing

💡 Adobe Acrobat Pro also supports certificate-based encryption — encrypting the PDF so only specific named recipients (identified by their digital certificates) can open it. This removes the need to share a password entirely, which is ideal for high-security enterprise workflows.

Method 6 — Microsoft Word (Free, Already Installed)

Microsoft Word — Export as Password-Protected PDF (AES-256)

✅ Free 💻 Offline 🛡️ AES-256 🔒 No Upload 🪟 Win 🍎 Mac

If Microsoft Word is already installed on your computer, you can export any document as a password-protected PDF for free — no extra tools needed. Word uses AES-256 encryption and works completely offline. This is the single most overlooked free method for Windows and Mac users. Works with Word 2016, 2019, 2021, and Microsoft 365. For a full walkthrough of Word PDF export, see our Word to PDF conversion guide.

Windows (Microsoft Word):

Open your document in Microsoft Word. To protect an existing PDF, open Word → File → Open → select the PDF (Word converts it automatically).
Click File → Export → Create PDF/XPS → click Create PDF/XPS.
In the Save dialog, click the Options… button.
In the Options window, check Encrypt the document with a password → click OK.
Enter your password twice to confirm → click OK → click Publish. The PDF is saved with AES-256 encryption applied.

Mac (Microsoft Word or Preview):

In Word for Mac: File → Save As → change format to PDF → tick the Encrypt checkbox → enter your password → click Save.
In Preview (built-in, free): Open the PDF → File → Export as PDF → click Show Details → tick Encrypt → enter password → click Save.

💡 Mac's built-in Preview app can password-protect any PDF for free — zero third-party tools, zero upload. File → Export as PDF → Encrypt → set password → Save. A hidden gem available on every Mac.

Building a Strong PDF Password

AES-256 encryption is unbreakable — but a weak password undermines all of that security instantly. The strength of your PDF protection is only as strong as your chosen password:

🔑 PDF Password Strength Reference

Weak

Example: pdf2026 — Simple word + year. Crackable by dictionary attack in seconds.

Fair

Example: Invoice#2026 — Predictable pattern. Breakable with targeted attack within hours.

Strong

Example: Kx#72mQp!Vb9 — 12+ chars, mixed case, numbers, symbols. Estimated crack time: centuries.

Best

Example: r8!ZwNq@4Lx#Bt2&Cv — 18+ chars, fully random. Effectively impossible to brute-force.

Use a minimum of 12 characters — 16+ is ideal for highly sensitive documents.
Mix uppercase, lowercase, numbers, and symbols (!@#$%^&*) with no predictable pattern.
Avoid real words, names, dates, keyboard walks (qwerty), or any personally identifiable information.
Use a password manager like Bitwarden (free) or 1Password to generate and store complex passwords securely.
Never lose the password — there is no recovery option for AES-encrypted PDFs. Not even the tool that encrypted it can bypass it.

Method Comparison at a Glance

Use this table to select the right protection method based on encryption strength, privacy requirements, and platform:

#	Method	Free	No Upload	Encryption	Permissions	Offline
1	ProPDFMaker	✅ Yes	✅ Yes	AES-256	✅ Yes	⚠️ Browser needed
2	Smallpdf	✅ Free tier	✗ Uploads	AES-128	⚠️ Pro only	✗ No
3	iLovePDF	✅ Yes	✗ Uploads	AES-128	✅ Yes	✗ No
4	PDF24	✅ Yes	✅ Desktop app	AES-256	✅ Yes	✅ Desktop app
5	Adobe Acrobat Pro	✗ Paid (free online)	✅ Desktop	AES-256	✅ Full control	✅ Yes
6	Microsoft Word	✅ (if installed)	✅ Yes	AES-256	✗ No	✅ Yes

Security Best Practices After Protecting

Send the password via a separate channel — never include the password in the same email as the protected PDF. Use SMS, a phone call, WhatsApp, or a separate email so the two pieces of information cannot be intercepted together.
Test before distributing — open the protected PDF in a fresh browser tab or a different device to confirm the password works correctly before sending it to the recipient.
Keep the unprotected original safe — store an unencrypted master copy in a private, secure location (password manager vault, encrypted hard drive) so you can update or reuse the document later.
Compress before protecting — if you need to email the file within an attachment size limit, use our Compress PDF tool first, then apply the password. Compressing an already-encrypted PDF is significantly less effective.
Add a watermark for extra security — for PDFs shared with multiple parties, add a visible recipient identifier with our Watermark PDF tool before encrypting. This lets you trace the source of any leak.
Store passwords in a password manager — tools like Bitwarden (free) or 1Password store all your PDF passwords securely. Never save them in a plain text file or sticky note.

🔓

Need to Unlock a Protected PDF?

If you need to remove password protection from a PDF you own (and you know the current password), use our free Unlock PDF tool — it removes encryption entirely inside your browser with no upload. You can also sign the PDF before protecting it, or repair a corrupted PDF if the file was damaged before you could protect it.

Frequently Asked Questions

What is the difference between AES-128 and AES-256 for PDF protection?

Both are considered practically unbreakable with current technology — the difference is theoretical future-proofing. AES-256 has a larger key space and is recommended for highly sensitive or long-term documents. AES-128 is equally secure for everyday business use. ProPDFMaker, Adobe Acrobat, PDF24 Desktop, and Microsoft Word all use AES-256. Smallpdf and iLovePDF's free tiers use AES-128. Either is sufficient for 99.9% of use cases.

Can I password protect a PDF on my phone for free?

Yes. Open ProPDFMaker's Protect PDF tool in Safari (iPhone) or Chrome (Android), select your PDF, set a password, and download the encrypted file — entirely in your mobile browser with no app download. Smallpdf and iLovePDF also work well on mobile browsers.

Will the password survive if the PDF is forwarded or shared?

Yes — password protection is embedded inside the PDF file itself, not tied to any application or server. It travels with the file wherever it goes. Whether the recipient opens it on Adobe Reader, Chrome, their phone, or any other PDF viewer, they will be prompted for the password before the content is shown.

Can I protect a PDF without it being uploaded to any server?

Yes — ProPDFMaker's Protect PDF tool encrypts your PDF entirely inside your browser using the Web Crypto API. Your file never leaves your device at any point during the encryption process. The PDF24 Desktop App for Windows is the best fully offline alternative — no internet connection needed after installation.

What happens if I forget the PDF password?

AES-encrypted PDFs have no recovery mechanism — there is no "forgot password" feature, even for the tool that applied the encryption. Your only options are: check your password manager, try known password variations, or — if you still have the original unprotected file — re-apply a new password. This is why storing PDF passwords in a tool like Bitwarden before encrypting is essential.

Can I protect a PDF and also restrict printing and editing?

Yes — this is called a Permissions Password (owner password). Set it in addition to or instead of an Open Password. The file can be opened without a password, but readers cannot print, copy text, or edit the document. ProPDFMaker, iLovePDF, PDF24, and Adobe Acrobat Pro all support permissions passwords. This is ideal for official reports, certificates, and branded documents you want readable but tamper-proof. See our full Password Protect PDF guide for detailed permission setup steps.