How to Password Protect a PDF File

A PDF can be protected in two distinct ways: with an open password that prevents the file from being viewed without the correct password, or with a permissions password that allows viewing but restricts actions like printing, copying, or editing. Most people looking to secure a PDF actually want the first type, which encrypts the file itself.

The two types of PDF protection

Open password (also called a user password) encrypts the document so it cannot be opened at all without entering the correct password. This is the strongest form of protection since the content is unreadable without the key, regardless of what tool someone uses to try to open it.

Permissions password (also called an owner password) allows anyone to open and read the file, but restricts specific actions such as printing, copying text, or editing content. This is weaker protection since the visible content is not actually encrypted, only the allowed actions are restricted, and these restrictions can sometimes be bypassed by tools that ignore permission flags.

For genuinely sensitive documents, an open password is the correct choice. A permissions password is more appropriate when the goal is simply to discourage casual copying or editing rather than to secure confidential content.

What encryption strength actually matters

Modern PDF encryption typically uses AES with either 128-bit or 256-bit keys. AES-256 is the current standard and should be used whenever the option is available, since older 40-bit or 128-bit RC4 encryption, still supported by some tools for backward compatibility, is considered weak by today's standards and should be avoided for anything sensitive.

Steps to password protect a PDF

1. Open the PDF in a tool that supports encryption, not just viewing.
2. Locate the security or protection settings, usually found under a menu labeled Protect, Security, or Permissions.
3. Choose to set an open password (sometimes labeled "password to open" or "user password").
4. Select AES-256 encryption if the option is presented, rather than a legacy encryption standard.
5. Enter and confirm the password, then save the file. Note that many tools require saving as a new file rather than overwriting the original when encryption is applied.

Common mistakes to avoid

Using a weak or reused password defeats the purpose of encrypting the file in the first place, since PDF passwords are subject to brute-force and dictionary attacks like any other password. A short, guessable password on a AES-256 encrypted file is still a weak link.

Relying only on a permissions password when the actual goal is confidentiality is another common mistake. Since the content remains technically readable, this does not provide real protection against someone determined to access the file.

Forgetting the password is also effectively unrecoverable for properly AES-256 encrypted files. There is no legitimate backdoor, since the strength of the encryption that protects the file from attackers is the same strength that makes it unrecoverable without the correct password.

Quick summary

To password protect a PDF: set an open (user) password rather than only a permissions password if confidentiality is the goal, use AES-256 encryption when available, choose a strong and non-reused password, and keep in mind that a forgotten password cannot be recovered on a properly encrypted file.