The quickest way to encrypt a PDF

Most PDF readers built into Windows, Mac, and phones can encrypt a PDF without installing anything new. Open the PDF in your system's default reader, look for a menu option called "Protect", "Security", or "Encrypt", and set a password. The file then requires that password to open. This takes about 30 seconds and works on any device that can read the encrypted file later.

If your PDF reader does not have this option, you can use free software like PDFtk or the open-source tool LibreOffice Draw. Both let you add password protection to an existing PDF. On Windows, right-click the PDF, select "Open with", and choose one of these programs, then look for security or protection settings in the File menu.

The trade-off: basic password protection (called "user password") stops someone from opening the file, but does not prevent copying text or printing if they guess the password. If you need stronger protection—preventing copying, printing, or editing even after someone opens it—you need a second layer called "owner password", which most free tools do not offer.

Key Takeaways

  • Your computer's built-in PDF reader (Preview on Mac, Microsoft Edge on Windows) can add password protection without extra software.
  • A user password stops the file from opening; an owner password prevents copying, printing, and editing after it opens.
  • Free tools like PDFtk and LibreOffice Draw work on Windows and Mac if your default reader lacks encryption options.
  • Password-protected PDFs remain encrypted on cloud storage and email, so the file stays protected even after you send it.

How to encrypt a PDF on Windows

Windows 11 and Windows 10 come with Microsoft Edge, which opens PDFs and includes encryption. Open your PDF in Edge, press Ctrl + P to open the print dialog, then select "Print to PDF" from the printer dropdown. A new window appears; click "More settings" and look for a "Security" or "Encryption" option. Set your password and save the file with a new name.

If Edge does not show encryption options, read PDFtk (free, open-source) or use LibreOffice Draw. Open the PDF in LibreOffice, go to File > Export as PDF, click the "Security" tab, and enter a password under "Open password". This password is required to open the file. If you also want to prevent copying or printing, check the boxes under "Permissions" and set an owner password (a different password that controls what people can do after opening).

For a faster method on Windows 10 and 11, right-click the PDF file, select "Open with" and choose Microsoft Edge or another PDF reader, then use that reader's built-in protection feature if available. Check the process menu (usually three dots or lines) for "Protect", "Security", or "Encrypt".

How to encrypt a PDF on Mac

Mac's built-in Preview app is the fastest option. Open the PDF in Preview, click File > Export, and a dialog box appears. At the bottom, check the box labeled "Encrypt". A password field appears; enter your password twice and save the file. The encrypted PDF now requires that password to open.

Preview's encryption is straightforward but limited—it only sets an open password, not permissions for copying or printing. If you need finer control, open the PDF in LibreOffice Draw (free read from LibreOffice.org), go to File > Export as PDF, click "Security", and set both an open password and an owner password with specific restrictions.

You can also use the command line tool qpdf if you are comfortable with Terminal. Install it via Homebrew (a Mac package manager), then run a command like qpdf --encrypt yourpassword yourpassword 40 -- input.pdf output.pdf. This creates an encrypted copy without changing the original.

Understanding open passwords versus owner passwords

An open password (also called a user password) prevents anyone from opening the file at all. Without the password, the PDF reader shows a locked icon and refuses to display the content. This is the most common type and is what most people mean when they say "encrypt a PDF".

An owner password (also called a permissions password) works differently. The file still opens without a password, but certain actions—copying text, printing, editing, or extracting images—are blocked. Someone with the owner password can remove these restrictions. Owner passwords are weaker than open passwords because the file itself is still readable; only specific actions are prevented.

Most free tools only support open passwords. If you need both layers, use LibreOffice Draw or a paid tool like Adobe Acrobat. For most situations, an open password is enough: if someone cannot open the file, they cannot copy from it or print it either.

What happens when you send an encrypted PDF

An encrypted PDF stays encrypted when you email it, upload it to cloud storage, or share it through messaging apps. The encryption is part of the file itself, not dependent on where it sits. The recipient must enter the password to open it, whether they receive it via Gmail, OneDrive, Slack, or any other method.

You need to share the password separately—never in the same email or message as the file. A common practice is to send the PDF in one message and the password in a phone call, text message, or separate email sent minutes later. This way, if someone intercepts the email, they have only half of what they need.

If you are sending sensitive documents to a specific person, consider whether they have the software to open encrypted PDFs. Most modern PDF readers handle password-protected files, but older or specialized readers might not. Test with a small file first if you are unsure.

When encryption is not enough

Password-protecting a PDF prevents casual access, but it is not military-grade security. If someone has significant motivation and technical skill, they can attempt to crack a weak password or use specialized tools to remove encryption. For highly sensitive documents—financial records, legal contracts, medical information—consider additional steps.

Use a strong password: at least 12 characters mixing uppercase, lowercase, numbers, and symbols. Avoid dictionary words, birthdays, or names. A password like "BlueMoon#2847$Desk" is far stronger than "password123".

For maximum security, encrypt the file, then encrypt the folder or drive it sits on using your operating system's built-in tools (BitLocker on Windows, FileVault on Mac). This adds a second layer: even if someone cracks the PDF password, they still cannot access the file without the drive password.

Removing encryption from a PDF you own

If you encrypted a PDF and now need to remove the password, open it in the same tool you used to encrypt it. In Preview on Mac, open the encrypted PDF (you will need to enter the password), then go to File > Export and leave the "Encrypt" box unchecked. Save the file with a new name.

In LibreOffice Draw, open the encrypted PDF, go to File > Export as PDF, click the "Security" tab, and leave both password fields blank. Save the file. The new version will have no password protection.

If you forgot the password to a PDF you created, you cannot recover it through normal means. Password-protected PDFs are designed so that even the software vendor cannot bypass the password. Your only option is to recreate the document from scratch or use specialized password-cracking tools, which are slow and unreliable for strong passwords.

Frequently Asked Questions

Can I encrypt a PDF that is already password-protected?

Yes. Open the encrypted PDF (enter the password when prompted), then export or save it with a new password using your PDF reader or LibreOffice. You can change the password this way, but you cannot add a second password layer—only replace the existing one.

Does encrypting a PDF slow it down or make it harder to edit?

No. An encrypted PDF opens and reads at the same speed as an unencrypted one, as long as you have the password. Editing is a separate issue: most PDF readers cannot edit PDFs at all, encrypted or not. If you need to edit a PDF, decrypt it first, make changes in a tool like LibreOffice Draw, then encrypt it again.

What if someone opens my encrypted PDF and I want to revoke access?

Encryption does not work that way. Once someone has the password and opens the file, you cannot remotely lock them out. If you need to prevent someone from accessing a document, you must change the password and send the new one only to people who should have it. This requires you to track who has the old password.

Is a PDF password the same as a file password on my computer?

No. A PDF password protects only that one file. A file or folder password (using Windows BitLocker or Mac FileVault) protects everything in that location. For sensitive documents, use both: encrypt the PDF with a password, and store it in an encrypted folder.

Can I encrypt a PDF on my phone?

Most phone PDF readers do not have built-in encryption. On iPhone, you can use the Files app to add a password to a folder, then store the encrypted PDF there. On Android, apps like "PDF Protector" or "PDF Password Protector" can add passwords, though quality varies. For reliable encryption, use a computer first, then transfer the encrypted file to your phone.