How to Password Protect a PDF

PDF password protection isn't one feature — it's two — and mixing them up is the most common mistake people make trying to secure a document.

Open password vs. permissions password

An open (user) password stops anyone from opening the file at all until they enter it. A permissions (owner) password lets the file open but restricts what can be done with it — printing, copying, editing. If you actually want the contents kept confidential, you need the open password, full stop.

Picking a password that holds up

A short password feels secure but isn't — PDF encryption, especially older versions, is crackable with brute force. Go 12+ characters, mix letters, numbers, symbols, and skip anything tied to the document itself, like a company name or the year.

Restricting permissions separately

Beyond the password, most tools let you turn off printing, copying, or editing independently. Useful for discouraging casual copy-paste of a contract, but don't treat it as real security — permissions restrictions are far easier to bypass than a genuine open password.

Sharing it safely

Never send the password in the same email as the file. Send the file, then the password through a different channel — text, a call, whatever — so intercepting one doesn't hand over both.

Getting it off later

You'll need the original password to remove it. There's no legitimate way around a PDF password you don't know — that's the entire point of it existing — so keep your passwords somewhere you won't lose them.