← All guides

How to Password Protect a PDF

pdfpasswordsecurity

You have a PDF with sensitive information you need to share but not openly. Adding a password ensures only people with the password can open it. Every major OS has built-in support for this.

On Mac: Preview

Preview can password-protect PDFs:

  1. Open PDF in Preview
  2. File → Export as PDF
  3. Check Encrypt box
  4. Enter and verify password
  5. Click Save

The exported PDF requires the password to open.

On Windows: free tools

Windows doesn’t have built-in PDF password protection, but free options exist:

LibreOffice Draw (free): open PDF → File → Export As PDF → check “Encrypt the document” → set password.

PDF24 (free, desktop): dedicated PDF tools including password protection.

Smallpdf, ilovepdf (online): password protect feature. Upload-based.

Adobe Acrobat Pro (paid): the gold standard.

On Word: password-protected export

If your PDF originated from Word:

  1. Open document in Word
  2. File → Save As
  3. Choose PDF
  4. Click Options in the Save dialog
  5. Check Encrypt the document with a password
  6. Set password
  7. Save

The output PDF requires the password.

On iPhone

iOS doesn’t have direct password-PDF tools, but workarounds:

Email yourself with a password: most apps allow attaching with password-protect option somewhere.

Use shortcuts app to chain a workflow.

Browser-based: open a PDF protection service in Safari (privacy concern).

For regular iPhone-side PDF protection: third-party apps are needed.

Two types of passwords

PDFs support two distinct passwords:

Open password (user password): required to open the PDF. Without it, the PDF can’t be viewed.

Permissions password (owner password): allows opening but restricts what can be done — preventing printing, editing, copying. The user can read but can’t extract content.

For sharing a PDF where only certain people should view: use open password.

For preventing unauthorized printing/copying: use permissions password.

For both: set both passwords (typically with different values).

What passwords actually protect against

A password-protected PDF protects against:

  • Casual unauthorized viewing
  • People without the password trying to open

Less effective against:

  • Determined attackers: PDF passwords (especially older PDF versions) can be brute-forced or removed with specialized tools. The protection is “speedbump for casual users,” not “fortress against sophisticated threats.”
  • Already-cached versions: if the PDF was opened and saved in the recipient’s PDF viewer, it might be cached unencrypted.
  • Print and re-scan: anyone with the password can print, then scan back to PDF without password.

For genuinely sensitive content:

  • Use real encryption tools (file-level encryption, encrypted email)
  • Or zip the PDF with a strong password using a tool like 7-Zip
  • Or use end-to-end encrypted file transfer (Tresorit, signed-up cloud services)

PDF passwords are appropriate for “casual privacy” — preventing unauthorized opening in shared contexts.

Choosing a strong password

Even for casual protection, choose well:

  • At least 12 characters
  • Mix of letters, numbers, symbols
  • Not a dictionary word
  • Different from passwords on other services
  • Memorable to authorized users (or shared via a separate channel)

For sharing: communicate password through a different channel than the PDF. Email password + email PDF = if email is compromised, both are exposed. Share via Signal/WhatsApp/phone call/in-person.

Removing a password

If you have the password and want to remove it:

Mac Preview: Open PDF → Enter password → Export as PDF → uncheck Encrypt → Save without password.

Adobe Acrobat: similar workflow.

Online services: PDF unlock features. Upload-based.

If you don’t have the password: legitimate tools cannot remove the password. Some less-reputable tools claim to crack passwords; for strong passwords on modern PDFs, this isn’t practical.

When the recipient can’t open

Common issues:

Wrong password: double-check what you sent. PDF passwords are case-sensitive.

Different password types confused: open password vs permissions password.

Old PDF reader: some older PDF viewers don’t support the encryption method. Try a modern viewer.

Corrupted file: re-send.

Alternative: ZIP with password

For stronger protection:

  1. Save PDF without password
  2. Add to a ZIP archive with password (using 7-Zip, WinZip, or Mac’s built-in compression with terminal)
  3. Send the ZIP
  4. Share password through secondary channel

ZIP encryption (with AES-256) is harder to crack than PDF passwords. The recipient needs to know the ZIP password to extract the PDF.

TL;DR

  • Mac: Preview → File → Export as PDF → check Encrypt
  • Windows: LibreOffice Draw, PDF24, or Adobe Acrobat Pro
  • Word source: File → Save As → PDF → Options → Encrypt with password
  • Two password types: open (to view) and permissions (to restrict actions)
  • PDF passwords are “casual protection” — not strong encryption
  • For genuinely sensitive content: use file-level encryption or password-protected ZIP
  • Share passwords through a separate channel than the PDF itself
  • To remove a password: requires having the password