How to Password Protect a PDF (Free, No Software)
Need to lock a sensitive PDF before emailing it? Add a strong password in 5 seconds. No install, no signup, AES-256 encryption. Free.
You've got a PDF you don't really want a stranger to read — a bank statement, a contract, a medical record, a payslip — and you're about to email it. The recipient is supposed to read it. Random people in the middle (a misaddressed email, a forwarded thread, a hacked inbox) shouldn't.
The fix is simple: add a password to the PDF before you send it. The file stays a normal PDF on the outside, but anyone who tries to open it needs to type the password first. Send the password through a different channel (text message, WhatsApp, in person) and you're sorted.
What "password protected" actually means
A password-protected PDF is encrypted. The text and images inside are scrambled until the correct password is provided. Modern tools (including pdfty) use AES-256 — the same encryption banks, hospitals and governments use for their most sensitive data. Without the password, nobody can open the file, even if they have unlimited time and a fast computer.
A few things worth knowing:
- Forget the password = forget the file. There's no recovery. We don't store the password, we can't recover it later. Pick something you'll remember (or write it down somewhere safe).
- The protection survives copies and forwards. Even if someone saves the PDF to their drive and re-emails it, it stays locked.
- It works in every PDF reader — Adobe Reader, Preview on Mac, browser viewers, phone apps. Open the file → it asks for the password → you type it → it opens.
How to add a password — step by step
Open the protect tool
Go to pdfty.com/tools/protect. Free up to 20 MB per file. No signup.
Upload your PDF
Drag the PDF onto the lavender box, or click to pick it from your computer. Upload happens over HTTPS — encrypted in transit.
Type a password
Pick something at least 12 characters with a mix of letters, numbers and symbols. A passphrase like coffee-bike-rainfall-42 works well — long, easy to remember, hard to guess.
Wait a moment
Encryption itself is quick — usually 2-3 seconds. Bigger files (over 100 pages) might take 5-10 seconds.
Download the locked file
The downloaded PDF looks normal but opens with a password prompt. Send it to whoever needs it, and send them the password through a different channel.
How to pick a strong password
The two failure modes are: too easy to guess and too easy to forget. A good password threads the needle.
| Password | Strength | Why |
|---|---|---|
| `123456` | ❌ trivial | Cracked instantly. Don't use. |
| `Password1!` | ❌ weak | On every cracker's top-100 list. |
| `marsha19` | ❌ weak | A name + year. Public info, guessable. |
| `Tr0ub4dor&3` | ⚠ medium | Looks complex, actually crackable in days. |
| `coffee-bike-rainfall-42` | ✓ strong | Random words + a number. Easy to remember, hard to crack. |
| `9zQ#mP!2vK*nR4` | ✓ very strong | Truly random. Use only if you'll store it in a password manager. |
A simple rule of thumb: four unrelated words separated by dashes is plenty for everyday documents. If the file is genuinely sensitive (financial, medical, legal), aim for six words or random characters via a password manager.
How to send the password
Whatever you do, don't put the password in the same email as the PDF. That defeats the whole point — if someone intercepts the email, they have both.
Better channels:
- Text message (SMS) — different system, different account
- WhatsApp / Signal / Telegram — encrypted by default
- In person or over a phone call — if you're already meeting/talking
- A password manager's shared note — for ongoing collaboration
For one-off sensitive files this is enough. For repeated workflows (monthly payroll, recurring contracts), set up a proper secure-sharing tool — but for sending one PDF, a password + a text message covers most real-world risk.
What this protects you against
What it doesn't protect against:
- Someone who has your password. (Pick a good one, don't share it loosely.)
- A device that's already compromised — if someone's recording your screen there's no PDF setting that helps.
- A truly determined attacker with the unencrypted original. (Make sure the original is also handled carefully.)
For 99% of "I'm about to email something I'd rather not leak" situations, password-protecting the PDF is the right answer.
Frequently asked questions
What if I forget the password?
There's no recovery. The file is genuinely encrypted — nobody (not us, not Adobe, not the FBI) can open it without the password. Write it down somewhere safe, or use a password manager. If the document is truly important and you lost the password, you'll need to find the original unprotected version.
Is the encryption really strong?
Yes. AES-256 (Advanced Encryption Standard, 256-bit key) is what banks, hospitals, the U.S. government, and HTTPS (the lock icon in your browser) all use. There is no known practical attack against it. The weak link is always the password — pick a strong one.
Can I add two passwords (one to view, one to edit)?
The PDF standard supports two passwords: the user password (needed to open the file) and an owner password (needed to change permissions — printing, copying text, editing). Our protect tool sets the user password — the strong one. If you also need to lock down editing and printing, look at the Edit permissions advanced options on the tool page.
Can I remove the password later?
Yes — use our Unlock PDF tool with the password, and you get the unprotected file back. (Without the password, neither we nor anyone else can unlock it.)
Will it still work on a phone / Mac Preview / browser viewer?
Yes. AES-256 PDFs open in every modern reader: Adobe Acrobat Reader (free), Apple Preview, Microsoft Edge, Chrome's built-in viewer, Apple Books, Google Drive's preview, every iOS and Android PDF app. They'll all prompt for the password.
What's the file size limit?
20 MB on the free plan. For larger files (or to batch-protect many at once), Pro is $9/mo with no limits.
Do you store my password?
No. The password is used in the moment to encrypt the PDF, then it's discarded. We never log passwords, we never save them, we never see them after the encryption finishes. If you forget it, even we can't help.
How is this different from "Restricted access" in Microsoft Office?
Microsoft's "Information Rights Management" needs an Office 365 license on both sides — you and the recipient. A password-protected PDF works in every PDF reader on every device with no account or license. For "I'm sending this to a stranger or a small business", the PDF approach is much more practical.
Can I protect a Word file the same way?
Word has its own built-in protection (File → Info → Protect Document → Encrypt with Password), but most workflows expect a PDF. If you also need the file in PDF, convert it to PDF first and then run it through protect — the result is one strongly encrypted file that opens on every device.
The pdfty team builds privacy-first online PDF tools — compress, convert, OCR, sign and protect. Files are deleted within 1 hour. About us →
