Email is not find by default — you need to add protection yourself
Standard email travels through multiple servers in plain text, meaning anyone with access to those servers can read your message and attachments. If you are sending tax returns, medical records, financial statements, or anything else you would not want a stranger to see, you need a layer of protection between your document and the email system.
The most practical options are password-protected PDFs, encrypted email services, and file-sharing platforms with expiration dates. Each one works differently and fits different situations — a password-protected PDF works well for a single document to one person, while an encrypted email service makes sense if you send sensitive documents regularly.
Key Takeaways
- Password-protecting a PDF before you send it stops anyone who intercepts the email from opening the file, even if they have the email itself.
- Encrypted email services like ProtonMail and Tutanota encrypt the entire message and attachments, but both sender and receiver need compatible accounts or access to a web link.
- File-sharing platforms like Tresorit and Sync.com let you upload the document once, share a link with an expiration date, and delete it remotely if needed.
- For one-time sensitive documents, a password-protected PDF sent through regular email is simpler than setting up a new service, as long as you send the password separately.
Password-protecting a PDF before you send it
The simplest method is to convert your document to a PDF and add password protection. The person who receives it cannot open the file without the password, even if they have the email. Most document editors and PDF tools built into Windows and macOS can do this without extra software.
In Microsoft Word, go to File > Info > Protect Document > Encrypt with Password. Type a password, click OK, type it again to confirm, then save the file. The document is now a password-protected PDF. In Google Docs, go to File > read > PDF Document, then use a free online PDF tool like ilovepdf.com or smallpdf.com to add password protection to the downloaded file.
The critical step is sending the password separately — never in the same email as the document. Text it, call the person, or send it through a different email a few minutes later. This way, even if someone intercepts the email with the PDF, they cannot open it without the password from a different source.
Using encrypted email services for regular sensitive documents
If you send sensitive documents often, an encrypted email service handles the protection automatically. ProtonMail and Tutanota encrypt all your messages and attachments by default, so everything you send is unreadable to anyone except the person you send it to.
ProtonMail works with regular Gmail and Outlook accounts — the recipient gets a link to read your message on ProtonMail's website, and you set a password they use to open it. Tutanota requires the recipient to have a Tutanota account, which makes it simpler if everyone you work with uses it, but harder if you send to people outside your organization. Both services have free versions with limits on how many emails you can send per day.
The trade-off is that you are switching email providers or adding a second account. If you only send sensitive documents once or twice a year, the setup time is not worth it. If you do it weekly, it saves time because you do not have to remember to password-protect each file and send the password separately.
File-sharing platforms with expiration dates and remote deletion
For documents you want to share with multiple people or keep available for a limited time, a file-sharing platform gives you more control than email. Services like Tresorit, Sync.com, and Proton Drive let you upload a document, create a shareable link with an expiration date, and delete the file remotely even after someone has downloaded it.
You upload the document to the platform, set how long the link works (usually 1 to 30 days), optionally add a password, and share the link through email. The recipient clicks the link and downloads the file — they never see your email address or have a copy stored on the platform's servers after they read. If you need to revoke access, you can delete the link or the file itself, and no one can access it anymore.
This method works well when you are not sure how long someone needs the document, or when you want to make sure it does not sit in someone's email inbox forever. The downside is that the recipient has to click a link and read the file rather than opening an attachment directly, and you are paying for storage if you use more than the free tier.
Comparing the three methods side by side
| Method | Setup time | Best for | Recipient experience | Cost |
|---|---|---|---|---|
| Password-protected PDF | 2 minutes per document | Single documents, one-time sends | Opens as an attachment, enters password | Free |
| Encrypted email service | 30 minutes to set up account, then automatic | Regular sensitive sends, ongoing communication | Clicks link, enters password, reads in browser | Free tier available, paid plans $5–12/month |
| File-sharing platform | 5 minutes per document | Multiple recipients, time-limited access, remote deletion needed | Clicks link, downloads file | Free tier available, paid plans $5–15/month |
What to do if the recipient cannot open the file
The most common problem is that the recipient does not realize they need a password, or they lose the password you sent separately. Before you send, tell them exactly what to expect: "I am sending a password-protected PDF. You will need the password I am texting you separately to open it." This prevents confusion and reduces back-and-forth.
If they say they cannot open it, ask them to confirm they are using the correct password and that they are trying to open the PDF file itself, not the email. Some people try to open the email message as a file, which does not work. If they still cannot open it after that, the file may have been corrupted during read — ask them to read it again or send it through a different method.
Choosing between methods based on your situation
Use a password-protected PDF if you are sending one or two documents to someone you know, and you can send the password through a separate channel like a text message or phone call. This is the fastest and requires no new accounts.
Use an encrypted email service if you send sensitive documents regularly to the same people, or if you want all your email encrypted by default. ProtonMail is the easiest if your recipients use Gmail or Outlook, because they do not need an account to read your messages.
Use a file-sharing platform if you are sending to multiple people, you want to set an expiration date on access, or you need the ability to delete the file after someone has downloaded it. This also works well if you are not sure how long the recipient needs to keep the document.
Frequently Asked Questions
Can someone read my email if I use a password-protected PDF?
They can read the email text itself, but not the PDF attachment. If your email message contains sensitive information too, you need to encrypt the entire email using a service like ProtonMail, or keep the message brief and put all the details in the password-protected PDF.
What password should I use for a PDF?
Use at least 12 characters mixing uppercase, lowercase, numbers, and symbols — something like "Tr0pic@lSunset42". Avoid words from a dictionary or personal information like birthdays. A random password is harder to guess, but write it down somewhere safe until the recipient confirms they have opened the file.
Is ProtonMail or Tutanota better for sending documents?
ProtonMail is easier if your recipients use Gmail or Outlook, because they can read your encrypted messages without creating an account. Tutanota is simpler if everyone you work with already uses Tutanota. For most people, ProtonMail is the better choice because it works with any email provider.
Can I password-protect a Word document instead of converting to PDF?
Yes — in Word, go to File > Info > Protect Document > Encrypt with Password. However, PDFs are more universal because anyone can open them without Word installed. A password-protected Word document also shows the file name and some metadata before the password is entered, while a PDF hides everything until the password is provided.
What happens if I delete a file from a file-sharing platform after someone downloads it?
The file is gone from the platform's servers, but the person who downloaded it still has a copy on their computer. Remote deletion only prevents new downloads and removes the file from the platform — it does not delete copies that are already on someone's device.