How to Secure PDFs with Password Protection

Some documents shouldn't be openable by just anyone who gets hold of the file — a signed contract, a payslip, a medical record, a client's financial statement. Password protection adds a real barrier: without the password, the document simply won't open in any standard PDF reader.

How the encryption actually works

This is worth being precise about, because a lot of "password protect" tools online only add a visual watermark or a client-side view restriction that any determined person can bypass. Our Lock PDF tool applies genuine PDF Standard Security Handler encryption (AES) using a maintained fork of pdf-lib that implements real cryptographic protection — not a cosmetic label. The output file requires your password to open in Adobe Reader, Preview, browser PDF viewers, or any other compliant reader. Alongside the user password, the tool also sets document permissions — restricting printing to low resolution and disabling copying, editing, and form-filling by default — using a separately generated owner password so those restrictions can't be casually removed.

When to use it

Password protection makes sense any time a document's contents shouldn't be visible to whoever happens to receive the file — sending sensitive paperwork by email, storing confidential files in shared cloud storage, or handing off a document where you want a deliberate extra step between "received the file" and "can read it." It's not a substitute for encrypting your storage or securing your email account — think of it as one additional layer, not the whole security plan.

Practical notes

• There is no password recovery. If you forget the password you set, the file is unreadable — including by us. Store it somewhere reliable before you close the tab.
• Already-encrypted files can't be re-locked directly — remove the existing password first with a PDF reader, then apply a new one.
• Minimum password length is 4 characters, but for anything genuinely sensitive, use a longer, unique password rather than the minimum.

Testing it

After downloading, open the encrypted file in a different PDF viewer than the one you usually use, just to confirm the password prompt appears as expected before you send the file anywhere. This whole process runs locally in your browser — the file and the password you choose are never transmitted anywhere.