Password protection and encryption are the two main ways to lock a PDF

A PDF password stops someone from opening the file without typing the correct code. Encryption scrambles the content so it cannot be read even if someone gets the file. Most PDF tools let you add a password, a few let you encrypt, and some do both. Which one you need depends on what you are protecting against — a nosy coworker, a lost laptop, or a document that contains financial or medical information.

Password protection is faster to set up and works on any device that can open PDFs. Encryption is stronger but requires the right software to decrypt the file on the other end. For most people, a password is enough. For sensitive documents, encryption is worth the extra step.

Key Takeaways

  • A password prevents someone from opening a PDF without the correct code, but does not scramble the content if they do get in.
  • Encryption scrambles the file so it cannot be read even if opened, and is stronger protection for documents with financial or medical data.
  • Most free PDF tools (Adobe Reader, Preview on Mac, built-in Windows tools) can add a password but not encrypt.
  • Owner passwords let you restrict printing and copying; user passwords let you restrict opening the file itself.
  • Password length matters more than complexity — a 12-character password is harder to crack than a 6-character one with symbols.

How password protection works in practice

When you add a password to a PDF, you are setting a barrier at the file level. Someone who tries to open it will see a dialog box asking for the password before they can see any content. This works on any device — a phone, a tablet, a work computer, a library computer — because the password check happens before the PDF reader even loads the document.

The catch is that password protection does not hide the content from someone who knows the password. Once they type it in, they can read, copy, and print everything. If you want to prevent copying or printing even from people who have the password, you need an owner password, which is a separate layer. Some tools let you set both a user password (to open the file) and an owner password (to restrict what people can do once inside).

Password protection is built into most PDF readers, so you do not need special software. On a Mac, you can open a PDF in Preview, go to Tools, and add a password. On Windows 10 and later, you can print to PDF and set a password during that step. Adobe Reader (the free version) can open password-protected PDFs but cannot create them — you need Adobe Acrobat Pro for that.

When to use encryption instead of a password

Encryption scrambles the entire PDF file so that even if someone copies it to their computer, they cannot read it without the decryption key. This is stronger than a password because the file itself is unreadable, not just locked. If your PDF contains tax returns, medical records, or financial statements, encryption is the safer choice.

The downside is that encryption requires compatible software on both ends. If you send an encrypted PDF to someone using an older PDF reader or a phone app that does not support the encryption standard, they will not be able to open it. Most modern tools support standard encryption (AES-256 is the current standard), but it is worth testing with the person receiving the file before you send sensitive documents.

Free tools that offer encryption include 7-Zip (which can encrypt any file, including PDFs), some online PDF tools, and open-source software like LibreOffice. Adobe Acrobat Pro also encrypts PDFs. If you regularly work with sensitive documents, encryption is worth learning, but for most everyday PDFs, a password is sufficient.

Setting a password in the tools you already have

On Mac (Preview): Open the PDF, click Tools in the menu bar, then Encrypt. You will be asked to enter a password twice. This creates a user password that prevents opening the file. Preview does not offer an owner password option.

On Windows 10 and later: Open the PDF in Microsoft Edge, click the three dots menu, select Print, then choose Print to PDF. In the print dialog, click More settings and look for a Security or Encryption option. Not all printers show this, so check your specific version.

In Adobe Acrobat Pro: Open the PDF, go to File, then Properties. Click Security in the left panel. You can set a user password (to open the file) and an owner password (to restrict printing and copying). You can also choose the encryption level — 128-bit or 256-bit AES.

Online tools: Sites like SmallPDF, ILovePDF, and PDF.io let you upload a PDF and add a password without installing software. The file is encrypted during upload and deleted after processing, but you are trusting the website with your document. Use these only for non-sensitive PDFs or if you have no other option.

Choosing a password that actually protects your file

A strong password is long, not complicated. A 12-character password with only lowercase letters is harder to crack than a 6-character password with uppercase, numbers, and symbols. Aim for at least 12 characters. Use a mix of letters, numbers, and symbols if you can, but length is what matters most.

Do not use words from a dictionary, your name, your birthday, or anything someone who knows you could guess. Do not reuse a password you use elsewhere. If you are protecting a document you will share with others, use a password you can tell them verbally or in a separate message — never in the same email as the PDF.

If you forget the password, most tools cannot recover it. Some online services claim they can crack PDF passwords, but this is slow and unreliable for strong passwords. Write down your password in a password manager (like Bitwarden, 1Password, or KeePass) rather than in a text file on your computer.

Sending a protected PDF safely

If you are sending a password-protected PDF to someone, send the password separately — in a different email, a text message, or a phone call. This way, if the email with the PDF is intercepted, the password is not in the same message. This is especially important for sensitive documents.

Tell the recipient what to expect. Some people have never seen a password prompt on a PDF and may think the file is broken. A quick message like "I am sending you a password-protected PDF. The password is [password] — I will text it to you separately" prevents confusion.

If you are sending the PDF through an insecure channel (like regular email), consider encryption instead of just a password. Email is not encrypted by default, so someone with access to the email server could see the file. Encryption makes the file unreadable even if intercepted.

Removing or changing a password later

If you set a user password and later want to remove it, you will need to open the file with the password, then save it without one. In Preview on Mac, open the password-protected PDF, go to File, then Export, and choose a location without adding a new password. In Adobe Acrobat Pro, open the file, go to File, then Properties, then Security, and remove the password.

If you set an owner password (to restrict printing or copying) and forgot it, you cannot remove it without the password. This is by design — it prevents someone from opening a protected file and removing the restrictions. If this happens, you will need to recreate the document or contact the person who set the password.

If you want to change a password, the process is the same as removing it: open the file with the old password, then save it with a new one. Some tools let you change the password directly without re-saving the entire file, but most require you to export or save as.

Frequently Asked Questions

Can someone crack a PDF password?

Yes, but it depends on the password strength and the encryption method. A short password (under 8 characters) can be cracked in minutes with free tools. A 12-character password with mixed characters would take much longer. Owner passwords (which restrict printing, not opening) are easier to crack than user passwords. For highly sensitive documents, encryption is more find than a password alone.

What is the difference between a user password and an owner password?

A user password prevents someone from opening the PDF at all. An owner password lets someone open the file but prevents them from printing, copying text, or editing it. You can set both on the same PDF — the user password protects opening, and the owner password protects what people can do inside. Some tools only support one or the other.

If I password-protect a PDF, can the recipient edit it?

A password only locks the file from opening or restricts what people can do inside — it does not prevent editing. If you want to prevent someone from changing the content, you need to save the PDF as read-only or use an owner password that disables editing. Even then, someone with the password can remove the restriction.

Is it safe to use an online tool to password-protect a PDF?

Online tools are safe for non-sensitive documents, but for anything with personal or financial information, use software on your own computer instead. Online tools upload your file to their servers, and you are trusting them to delete it after processing. If you must use an online tool, check their privacy policy and avoid uploading documents with social security numbers, bank account information, or medical data.

What happens if I lose the password to a PDF I created?

If you set a strong password and forget it, most tools cannot recover it. This is intentional — it prevents someone from bypassing the protection. Store passwords in a password manager so you do not lose them. If you lose a password to a document you own, your only option is to recreate the document or contact whoever has the password.