A LITTLE HELP. A LOT DONE.
Good tools.
Great flow.
Your shortcut to the everyday. Create, convert, calculate,
and get back to what you love.
✳
✳
✓ Free to use✓ No sign-up✓ 500+ possibilities
About this tool
PDF Password Protect adds a password requirement to a PDF so only people who know the key can open it. The tool runs entirely in your browser using pdf-lib — your PDF never leaves the device, which matters for sensitive contracts, payroll PDFs, medical reports, and personal financial statements that you would never want to upload to a third-party server. You set a 'user password' (the one needed to open the file) and optionally a separate 'owner password' for permission control. The protection is applied at the viewer level via a JavaScript Open Action, which standard readers like Adobe Acrobat, Foxit Reader, and Microsoft Edge respect by prompting for the password on open.
Why use it
Browser-Only Privacy: Your PDF and your password never leave your device — pdf-lib runs locally with no server round-trip.
Confirm-Password Field: A second matching field catches typos before you commit, avoiding lockouts.
Optional Owner Password: Add a separate owner key for advanced permission control if your workflow needs it.
Free, No Watermark, No Signup: Output is clean and unbranded with no daily limit, account, or paid tier.
Fast Setup: Drop file, type password, click protect — done in under 30 seconds for typical contracts.
Works in All Major Readers: Adobe Acrobat, Foxit, Sumatra, and Edge all honour the password prompt on open.
How to use
- Drop your PDF onto the upload area.
- Type the password users will need to open the file in the 'User password' field.
- Re-type the same password in 'Confirm user password' to catch typos.
- Optional: tick 'Set a separate owner password' if you want a second key for permission control.
- Click 'Protect PDF' — pdf-lib rewrites the document with a viewer-level password prompt.
- Download the protected PDF and share it; recipients will be asked for the password on open.
When it helps
- When emailing a payroll PDF or HR letter and you want a basic gate against accidental opening.
- When sharing a draft contract via Slack or shared drive where unintended viewers could otherwise see it.
- When archiving sensitive personal documents on a USB stick that could be lost or stolen.
- When sending a financial statement, invoice, or tax form to a client over an unencrypted channel.
- When distributing internal training material that should not leak outside the team.
- When delivering a paid PDF product and you want to gate file opening behind a per-customer password.
Examples
Inputpayslip.pdf, password 'M@y2026Run', confirm matches
Expected resultpayslip-protected.pdf — opening prompts for the password in any reader
02Add separate owner password
Inputcontract.pdf, user 'open123', owner 'admin999'
Expected resultcontract-protected.pdf — open prompt + owner permissions key embedded
03Protect a confidential draft
Inputdraft.pdf, password 'StrongPwd2026', confirm matches
Expected resultdraft-protected.pdf — only readable by recipients holding the password
Tips
- Use a password at least 8 characters long with a mix of letters and numbers — short numeric PINs are trivial to brute-force.
- Send the password through a different channel than the PDF itself (email file, message password) so a single compromised channel doesn't leak both.
- For real cryptographic protection of high-stakes secrets, use qpdf, 7-Zip with AES, or VeraCrypt — viewer-level prompts are not unbreakable.
- Test by opening the protected PDF in a fresh tab or another reader before sending — make sure the prompt actually triggers.
- Consider pairing this with PDF Watermark to add a 'CONFIDENTIAL' visible mark in addition to the password gate.
Frequently Asked Questions
Is this AES-256 encryption?⌄
No — this tool applies a viewer-level password prompt via pdf-lib. It is suitable for casual protection but does not cryptographically scramble the PDF byte stream. For hard AES-256 protection, use qpdf or a desktop encryption tool.
Can the password be bypassed?⌄
Determined attackers using forensic PDF tools may bypass viewer-level prompts. For documents where bypass would cause real harm, use a tool that applies AES encryption — this protects against casual viewing, not state-sponsored adversaries.
What happens if I forget the password?⌄
There is no recovery — neither this site nor anyone else can recover a password you set. Always store the password somewhere safe before distributing the protected file.
Will the protected PDF open on mobile?⌄
Yes — modern mobile PDF readers including Adobe Acrobat Reader for iOS/Android, Apple Books, and Drive all respect the password prompt.
Are passwords sent to the server?⌄
No. Both the PDF and the password are processed entirely in your browser. Nothing is uploaded.
Can I remove the password later?⌄
Yes — open the protected PDF with the right password, then run it through the PDF Unlock tool here to strip the protection.
Why is the file size sometimes slightly larger?⌄
pdf-lib re-saves the PDF with the protection metadata added. The size delta is usually a few hundred bytes.
Does it preserve form fields and hyperlinks?⌄
Yes — protection wraps the document but does not modify content, so forms, hyperlinks, bookmarks, and annotations all carry through.
Glossary
- User Password
- The password a recipient must type to open and view the PDF — the primary security gate.
- Owner Password
- A second password (optional) that controls permissions like printing, copying, and editing — separate from the open-file gate.
- Open Action
- A PDF feature that fires JavaScript or another action when the file opens — used here to enforce the password prompt.
- AES Encryption
- The Advanced Encryption Standard used for hard cryptographic PDF protection; requires native libraries and is offered by tools like qpdf.
- Viewer-Level Protection
- Protection enforced by the PDF reader software, not by scrambling the byte stream itself; this tool's mode of operation.
- PDF Reader
- Software that opens and renders PDF files — Adobe Acrobat, Foxit, Sumatra, Edge, Chrome's built-in viewer.