How to Password Protect a PDF
You have a PDF with sensitive information you need to share but not openly. Adding a password ensures only people with the password can open it. Every major OS has built-in support for this.
On Mac: Preview
Preview can password-protect PDFs:
- Open PDF in Preview
- File → Export as PDF
- Check Encrypt box
- Enter and verify password
- Click Save
The exported PDF requires the password to open.
On Windows: free tools
Windows doesn’t have built-in PDF password protection, but free options exist:
LibreOffice Draw (free): open PDF → File → Export As PDF → check “Encrypt the document” → set password.
PDF24 (free, desktop): dedicated PDF tools including password protection.
Smallpdf, ilovepdf (online): password protect feature. Upload-based.
Adobe Acrobat Pro (paid): the gold standard.
On Word: password-protected export
If your PDF originated from Word:
- Open document in Word
- File → Save As
- Choose PDF
- Click Options in the Save dialog
- Check Encrypt the document with a password
- Set password
- Save
The output PDF requires the password.
On iPhone
iOS doesn’t have direct password-PDF tools, but workarounds:
Email yourself with a password: most apps allow attaching with password-protect option somewhere.
Use shortcuts app to chain a workflow.
Browser-based: open a PDF protection service in Safari (privacy concern).
For regular iPhone-side PDF protection: third-party apps are needed.
Two types of passwords
PDFs support two distinct passwords:
Open password (user password): required to open the PDF. Without it, the PDF can’t be viewed.
Permissions password (owner password): allows opening but restricts what can be done — preventing printing, editing, copying. The user can read but can’t extract content.
For sharing a PDF where only certain people should view: use open password.
For preventing unauthorized printing/copying: use permissions password.
For both: set both passwords (typically with different values).
What passwords actually protect against
A password-protected PDF protects against:
- Casual unauthorized viewing
- People without the password trying to open
Less effective against:
- Determined attackers: PDF passwords (especially older PDF versions) can be brute-forced or removed with specialized tools. The protection is “speedbump for casual users,” not “fortress against sophisticated threats.”
- Already-cached versions: if the PDF was opened and saved in the recipient’s PDF viewer, it might be cached unencrypted.
- Print and re-scan: anyone with the password can print, then scan back to PDF without password.
For genuinely sensitive content:
- Use real encryption tools (file-level encryption, encrypted email)
- Or zip the PDF with a strong password using a tool like 7-Zip
- Or use end-to-end encrypted file transfer (Tresorit, signed-up cloud services)
PDF passwords are appropriate for “casual privacy” — preventing unauthorized opening in shared contexts.
Choosing a strong password
Even for casual protection, choose well:
- At least 12 characters
- Mix of letters, numbers, symbols
- Not a dictionary word
- Different from passwords on other services
- Memorable to authorized users (or shared via a separate channel)
For sharing: communicate password through a different channel than the PDF. Email password + email PDF = if email is compromised, both are exposed. Share via Signal/WhatsApp/phone call/in-person.
Removing a password
If you have the password and want to remove it:
Mac Preview: Open PDF → Enter password → Export as PDF → uncheck Encrypt → Save without password.
Adobe Acrobat: similar workflow.
Online services: PDF unlock features. Upload-based.
If you don’t have the password: legitimate tools cannot remove the password. Some less-reputable tools claim to crack passwords; for strong passwords on modern PDFs, this isn’t practical.
When the recipient can’t open
Common issues:
Wrong password: double-check what you sent. PDF passwords are case-sensitive.
Different password types confused: open password vs permissions password.
Old PDF reader: some older PDF viewers don’t support the encryption method. Try a modern viewer.
Corrupted file: re-send.
Alternative: ZIP with password
For stronger protection:
- Save PDF without password
- Add to a ZIP archive with password (using 7-Zip, WinZip, or Mac’s built-in compression with terminal)
- Send the ZIP
- Share password through secondary channel
ZIP encryption (with AES-256) is harder to crack than PDF passwords. The recipient needs to know the ZIP password to extract the PDF.
TL;DR
- Mac: Preview → File → Export as PDF → check Encrypt
- Windows: LibreOffice Draw, PDF24, or Adobe Acrobat Pro
- Word source: File → Save As → PDF → Options → Encrypt with password
- Two password types: open (to view) and permissions (to restrict actions)
- PDF passwords are “casual protection” — not strong encryption
- For genuinely sensitive content: use file-level encryption or password-protected ZIP
- Share passwords through a separate channel than the PDF itself
- To remove a password: requires having the password