How to Password Protect a PDF for Free (2026 Guide)

About to email a tax return, a signed contract, or a scan of your passport? A PDF travels through inboxes, shared drives, and phones you don't control — and once it's out there, you can't pull it back. Adding a password encrypts the file so only people with the key can open it. This guide shows you exactly how to do it for free, which type of password to choose, how to share the key without undermining the whole point, and how to fix the snags people hit along the way.

Two Kinds of PDF Password — Pick the Right One

A PDF can hold two different passwords, and they do very different jobs. Choosing the wrong one is the most common reason "protection" doesn't behave the way people expect.

Open password (user password) — controls who can read it

Nobody can open or view the document without it. The file is genuinely encrypted, so this is the option you want for anything truly confidential. If in doubt, use this one.

Permissions password (owner password) — controls what readers can do

The file opens normally, but actions like printing, copying text, or editing are restricted. Use it when you're fine with people reading a document but don't want them reprinting or lifting content from it. Note that permission restrictions are honored by most viewers but are weaker than an open password — some tools can bypass them. For real secrecy, rely on the open password (you can apply both at once).

How to Add a Password to Your PDF: Step-by-Step

Step 1: Upload your PDF

Open EditPDFs.app and drag your file in (or click to browse). It loads straight into the editor — there's no account to create and nothing is sent to a server.

Step 2: Open the security settings

Find the security or password option. You'll be able to set an open password, a permissions password, or both — decide based on the section above.

Step 3: Set your password and restrictions

Type the password (you'll usually confirm it twice to avoid typos), and if you're using a permissions password, choose which actions to allow — printing, copying, editing. Double-check the password now; once the file is encrypted, a typo means even you can't get back in.

Step 4: Export the protected PDF

Download the file. The new copy is encrypted and prompts for the password the moment anyone opens it. Test it yourself before sending: open the downloaded file and confirm the prompt appears and your password works.

Ready to secure your PDF?

No signup, no watermarks, and no upload to servers — the encryption is applied right in your browser, so the file stays on your device.

Protect PDF Now →

Choosing a Password That Actually Holds Up

Modern PDFs use AES-256 encryption — effectively unbreakable. The weak link is almost always the password itself, so this is where your effort pays off:

Favor length over complexity. A four-word passphrase like copper-otter-lantern-9 is both easier to remember and harder to crack than a short string of symbols.
Skip anything guessable — birthdays, names, the company name, or a password you already use elsewhere. Those are the first things tried.
Let a password manager generate and store it (Bitwarden, 1Password, or your browser's built-in one) so a strong password doesn't become a sticky note.

Sharing the Password Without Defeating the Point

This is the step most people get wrong: never put the password in the same email as the PDF. If that inbox is compromised, the attacker has both halves. Send the file one way and the password another — a text message, a phone call, a chat app, or a separate email sent later. For a document you'll share repeatedly with the same person, agree on the password verbally once and reuse it for that relationship only.

Troubleshooting Common Problems

The recipient says they can't open it

Usually a typo in the password they were given, or it was copy-pasted with a trailing space. Passwords are case-sensitive — have them retype it by hand and check Caps Lock. Confirm they're opening the protected copy you sent, not an older version.

It opens without asking for a password

You likely set only a permissions password, which doesn't prompt on open. If you wanted to restrict viewing, re-protect the file with an open (user) password instead.

Printing or copying is still allowed

Either the restriction wasn't enabled, or the reader's viewer is ignoring permission flags (some do). Permission passwords are advisory by nature — for content you truly need to keep from being printed or extracted, combine an open password with flattening and sharing only with people you trust.

You forgot which password you set

There's no back door — that's the whole point of encryption. If you still have the original unprotected file, simply re-protect it with a fresh password. If not, and you genuinely know the password, see how to remove a password from a PDF. Going forward, store the password in a manager the moment you set it.

Protecting PDFs on Specific Devices

Windows / Mac (any browser): The browser steps above are identical and need no install. On Mac, Preview can also add an open password via File → Export → Encrypt, though it doesn't offer granular permission controls.
iPhone / iPad: Open EditPDFs.app in Safari and work from the Files app — no app download required.
Android: Use Chrome the same way — upload, set the password, and save the encrypted copy back to your device.

A Note on Privacy

Here's the irony of most "protect PDF" sites: they upload your unencrypted, confidential file to a server first, then add the password. You've handed the sensitive document to a third party before it was ever secured. With EditPDFs.app, encryption is applied locally in your browser, so the file — and its password — never leave your device. For documents you also want to scrub before sharing, pair this with removing hidden metadata or redaction.

Know the Limits

A password is a strong lock, not a force field. Keep realistic expectations:

Anyone with the password and on-screen access can still screenshot or photograph pages.
Once you share the password, you've shared access — you can't revoke it remotely.
A weak password undoes strong encryption; the password is the whole game.
For regulated or highly sensitive data, layer on encrypted file-sharing or rights management rather than relying on a PDF password alone.

Frequently Asked Questions

Is password-protecting a PDF really free?

Yes. On EditPDFs.app it's completely free with no signup, no watermark, and no file-size limit — protect as many PDFs as you need.

How strong is PDF encryption?

Modern PDFs use AES-256, which is virtually unbreakable on its own. The real vulnerability is a weak or guessable password, so the strength of your protection comes down to the password you choose.

What's the difference between an open password and a permissions password?

An open (user) password is required to view the file at all. A permissions (owner) password lets the file open but restricts printing, copying, or editing. Use the open password for true confidentiality; you can apply both together.

What happens if I forget the password?

The file can't be recovered — that's by design. Your only routes are re-protecting the original unprotected copy or, if you still know the password, removing it. Always save the password in a manager when you set it.

Does adding a password change my PDF's contents?

No. The text, images, layout, and quality stay exactly the same. Only an encryption layer is added so the file requires authentication to open.

Can I password-protect several PDFs at once?

Protect them one at a time so each gets the right password, or merge related files first if they should share a single password.

Are my files uploaded to a server?

Not on EditPDFs.app. Encryption runs in your browser, so the document and its password never leave your device — which matters most for exactly the confidential files you're trying to secure.

Can I remove the password later?

Yes, as long as you know it — see how to remove a password from a PDF. Keeping an unprotected backup makes switching protection on and off painless.