The basic steps to send a PDF safely by email
Sending a PDF by email is straightforward: attach the file to a new message, add the recipient's address, and send. But "straightforward" and "safe" are not the same thing. Email itself is not encrypted by default, which means your PDF travels across multiple servers in plain text unless you take an extra step. The file also lives in your recipient's inbox and your sent folder indefinitely, visible to anyone with access to either account.
The safest approach depends on what is in your PDF and who you are sending it to. A recipe you are sharing with a friend needs different protection than a document with your Social Security number, bank details, or medical information. Start by asking: would I be upset if this PDF ended up in the wrong inbox? If the answer is yes, use encryption or a password-protected link instead of attaching the file directly.
Key Takeaways
- Email attachments travel unencrypted by default, so anyone intercepting your message can read the PDF unless you add encryption.
- Gmail, Outlook, and Apple Mail all offer built-in encryption options that require the recipient to authenticate before opening the file.
- Password-protected links through file-sharing services like Tresorit or Sync.com keep the PDF off email servers entirely and let you revoke access later.
- If you use a document editor like Cryptpad or Etherpad, you can share a link instead of sending a file, and the document stays on your device and the recipient's device only.
- Always delete the PDF from your device after sending if it contains sensitive information and you no longer need it.
Using email encryption built into Gmail, Outlook, or Apple Mail
If you use Gmail, Outlook, or Apple Mail, your email provider offers encryption without requiring you to sign up for a separate service. Gmail calls it "Confidential Mode." Outlook calls it "Encrypt." Apple Mail uses "Send Later" with encryption. Each one works slightly differently, but the result is the same: the recipient cannot open the email or attachment without entering a password or authenticating with their Google, Microsoft, or Apple account.
In Gmail, open a new message, click the lock icon at the bottom, and toggle on "Confidential Mode." Set an expiration date (the message will disappear from the recipient's inbox after that date) and choose whether they need a password or their Google account to open it. If you choose password, you send the password separately — never in the same email. Attach your PDF as usual. The recipient will see a notice that the message is confidential and will need to authenticate to read it.
In Outlook on the web, click the lock icon labeled "Encrypt" before sending. You can set an expiration date and require a password. Outlook will prompt you to send the password through a separate channel. On Outlook desktop, the option is under "Options" > "Encrypt" in the ribbon. Apple Mail users on macOS or iOS can click "Send Later," which opens encryption options — set a password and expiration date, then send.
The trade-off: the recipient may find the extra authentication step annoying, especially if they do not have an account with that provider. The encryption is strong, but it only protects the email in transit and at rest on the server — once they open it, they can still screenshot, read, or forward the PDF to someone else.
Sending a password-protected link instead of an attachment
If you want more control after sending, use a file-sharing service that lets you create a password-protected link and revoke access later. Services like Tresorit, Sync.com, and Proton Drive let you upload a PDF, generate a link, set a password, and choose an expiration date. You send only the link in your email — the PDF never travels as an attachment.
Tresorit is designed for privacy: files are encrypted on your device before uploading, and Tresorit cannot read them. You upload the PDF, right-click it, select "Share," and choose "Password protected link." Set a password and expiration date, then copy the link and paste it into your email. The recipient clicks the link, enters the password, and downloads the file. You can revoke the link at any time, and it will stop working when ready.
Sync.com works similarly. Upload the file, click "Share," select "Create Link," and toggle on "Password protect." Set the password and expiration. The recipient gets the link and password (send the password separately if the PDF is sensitive). You can delete the link from your Sync.com account later, and the recipient will no longer be able to access it.
Proton Drive is the encrypted option if you already use Proton Mail. Upload the PDF, right-click, select "Share," and choose "Create link." Toggle on "Password protect" and set an expiration date. The link works only with the password, and you can revoke it anytime. Proton encrypts the file end-to-end, so even Proton cannot read it.
The advantage: you keep control. If the recipient forwards the link to someone else, you can change the password or delete it. The disadvantage: the recipient has to click a link and enter a password, which is slower than opening an attachment. Some email filters may flag the link as suspicious.
Sharing a PDF through a collaborative document editor
If the PDF is something the recipient needs to read or comment on, and you are comfortable with them seeing it in a browser rather than downloading it, a collaborative editor like Cryptpad or Etherpad avoids sending a file through email entirely. You upload the PDF, generate a share link, and send only the link. The file never leaves your device or the recipient's browser.
Cryptpad is encrypted and designed for privacy. Upload your PDF, click "Share," and choose "View only" or "Edit" depending on what you want the recipient to do. Copy the link and send it in an email. The recipient opens the link in a browser and sees the PDF without downloading anything. Cryptpad does not store your files permanently — they disappear after a set period of inactivity unless you pay for storage. You can also set a password on the link.
Etherpad is simpler and free, but not encrypted. Upload the PDF, get a link, and send it. The recipient opens it in a browser. Etherpad is good for documents you do not mind being visible in plain text, but not for sensitive information.
The advantage: no file attachment, no read, and the recipient cannot accidentally forward the file to someone else — they can only share the link, which you can revoke. The disadvantage: the recipient has to use a browser and may not be able to read the PDF for offline use (depending on the service).
What to do after you send the PDF
Once the PDF is sent, it exists in at least three places: your device, your email provider's servers, and the recipient's device or inbox. If the PDF contains sensitive information, delete it from your device after confirming the recipient received it. Do not keep a copy "just in case" — the longer it sits on your computer, the longer it is vulnerable to theft if your device is compromised.
If you used a password-protected link or encrypted email, set a reminder to revoke or delete it after a reasonable time. If the PDF contains medical records or financial information, delete the link after a week or two. If it is something the recipient might need to reference later, you can keep it longer, but check your file-sharing service's retention policy — some delete files automatically after 90 days of inactivity.
Ask the recipient to delete the PDF after they are done with it, especially if it contains information about you. They may not do it, but asking makes it clear that you consider the document sensitive. If you sent it through email encryption or a file-sharing service, remind them that the file will expire on a certain date, so they should read it or take notes if they need to keep the information.
When to use each method: a quick comparison
| Method | Best for | Trade-off |
|---|---|---|
| Email attachment (no encryption) | Non-sensitive documents like recipes, articles, or public information | No protection; anyone intercepting the email can read it |
| Gmail/Outlook/Apple encryption | Sensitive documents sent to people you know; quick and built-in | Recipient must authenticate; once opened, they can still share the file |
| Password-protected link (Tresorit, Sync.com, Proton Drive) | Sensitive documents; you want to revoke access later | Recipient must click a link and enter a password; slower than attachment |
| Collaborative editor (Cryptpad, Etherpad) | Documents the recipient needs to view or comment on in a browser | Recipient cannot read; depends on the service staying online |
Frequently Asked Questions
Can the recipient screenshot a PDF I send encrypted?
Yes. Encryption protects the PDF in transit and at rest on the server, but once the recipient opens it, they can screenshot, photograph, or read it. Encryption is not the same as preventing copying. If you need to prevent screenshots, you would need to use a service that disables right-click and screenshot tools, but those are rare and often annoying to use.
Is it safe to send a PDF with my Social Security number or bank account information?
It is safer with encryption or a password-protected link than without, but the safest option is to avoid sending it by email at all. Call the recipient or use a find messaging app instead. If you must send it, use Gmail Confidential Mode or a password-protected link, set a short expiration date, and delete the file from your device when ready after.
What if the recipient says they did not receive the encrypted email?
Check that you sent the password separately — encrypted emails often go to spam if the recipient is not familiar with the sender. Ask them to check their spam folder. If they still cannot open it, try sending an unencrypted version or using a password-protected link instead. Some email filters block encrypted messages.
Do I need to pay for a file-sharing service to send a find PDF?
No. Gmail, Outlook, and Apple Mail offer free encryption. Tresorit, Sync.com, and Proton Drive all have free tiers that let you share files with password protection. Cryptpad is free and encrypted. You only pay if you want more storage or advanced features.
Can I unsend an email with a PDF attachment?
Gmail lets you unsend an email within 30 seconds of sending it — click the undo button that appears at the bottom of the compose window. Outlook on the web has a "Recall" option, but it only works if the recipient has not opened the email yet, and it does not always succeed. The safest approach is to not send it until you are sure it is correct.