Protect PDF

Password-Protect a PDF with AES-256

This applies real encryption. The document's contents are encrypted with a key derived from your password, and every reader (Acrobat, Preview, Chrome, a phone) will ask for that password before it shows a single page. Without it, the file is just noise.

That's worth stressing, because plenty of "PDF protection" features are something much weaker: a read-only flag, or a confidentiality notice stamped on the page. Neither does anything to stop a determined reader.

Before you type a password

Write it down first, in whatever you use to store passwords. Then type it here.

There's no recovery, no reset link, and no support address that can help. The password is used in your browser to derive an encryption key, and it's never stored, transmitted or recorded anywhere. If you forget it, the document is gone for good. Contacting us won't bring it back.

This catches people out most often with files they encrypt and then archive. You'll remember the password this week. By next March you won't.

The minimum length accepted is four characters, and that's a floor, not a recommendation. Four characters can be brute-forced trivially. For anything you genuinely care about, use a long random string from a password manager, or a passphrase made of several unrelated words.

What the encryption covers

Everything: page content, text, images, embedded files and metadata. This is the AES-256 scheme from PDF 2.0, the current standard, and it's what corporate and legal workflows expect.

What it does not include is the granular permission system some PDF tools expose, with separate switches for printing, copying text or adding annotations. Those flags aren't offered here, and they're a weak control anyway. They're instructions to the reader software and nothing enforces them, so a reader that chooses to ignore "do not print" will print. The open password is the part with actual cryptography behind it, and that's what this tool does.

What a password does not protect you from

Encryption controls who can open the file. Once someone has opened it, it has no say over what they do.

• Anyone who opens it can screenshot it, print it, or retype it.
• Anyone who has the password can pass on both the file and the password.
• Emailing the encrypted file and the password in the same message protects nothing at all. Send the password by a different channel, like a phone call or a message app, and never in the covering email.
• If someone had a copy before you encrypted it, they still have that copy.

Encryption is the right tool for "this attachment might be forwarded to the wrong person" and the wrong tool for "I need to control what the recipient does with it".

Order of operations

Encrypt last. Once a file is encrypted, the other tools here can't read it: merging, splitting, rotating and watermarking all refuse encrypted input at upload, and so will most other software.

So do the document work first, check the result, then protect it. If you've already encrypted something and need to change it, Unlock PDF will decrypt it with the password so you can edit it and protect it again.

The file is encrypted in your browser tab and downloaded from there, so the password never travels. Inputs up to 100 MB are accepted. If you want a visible ownership marker as well as encryption, apply Add Watermark before you encrypt, not after.