Password Protect Your PDFs for Free Online

Add a brand-new open password to an unprotected PDF before you share it. The job this page does is one-way: take a PDF you can already open, invent a passphrase you want a future reader to have to type, and the tool writes a fresh encrypted copy that refuses to render the first page until that exact string is entered. After the upload lands, the page count is reported back so you can confirm the right document was attached before you commit the lock; once you choose Encrypt, every page, every embedded image, and every form field is sealed inside the same encrypted envelope and a download link appears for the protected copy. Two-channel delivery is what makes a freshly added open password worth the round trip: the protected file lands in the recipient's inbox over the email channel, the passphrase reaches them over a different medium (chat message, phone call, or a password-manager share), and the two halves meet only when the reader assembles them at the destination. A passphrase included in the same email as the freshly locked PDF undoes the protection in a single forwarded chain. The complementary direction - opening a PDF that is already encrypted because someone else set its password - lives on a separate page; this one only writes new locks, never reads existing ones.

One-direction-only on this URL. This route writes a brand-new encryption envelope; it does not read an existing one. If the PDF you have already opens with a password you know and you want a no-password copy, you are on the wrong page - the remove counterpart linked above is where that workflow runs. Confusing the two directions costs a round trip because the protect tool will treat an already-locked PDF as a plain input and add a second envelope on top.

Password strength on the protect side. PDF encryption is only as strong as the passphrase you type into the box. A 4-character all-lowercase password opens to a determined attacker in seconds; a 16-character mix of upper, lower, digit, and symbol takes years on consumer hardware. The envelope the tool wraps around the document is industry-standard AES; the breakable link is the human-typed string on the front of it. For a board pack, a contract, or a payslip worth re-locking, treat the passphrase like a one-time key: long, mixed, and shared on a different channel than the PDF itself.

When you are about to email a contract, send a payslip to an accountant, or share a board pack with someone outside the company, the natural first instinct is to put a password on the PDF before it leaves your machine. This page does exactly that one job: you choose a password, the file is encrypted with that password during a brief upload-encrypt-download round trip, and the copy you send out opens only after the reader types the same password. There is no document signing, no permissions matrix, no audit trail - just the on/off password lock that most readers actually mean when they say "add a password to this PDF".

This page handles only the protect half of the workflow - adding a password to a PDF you currently can open. The inverse direction - opening a locked PDF you have the password for and saving a no-password copy - is a separate, asymmetric job and lives on the remove PDF password tool. The shared input shape (a PDF plus a string you choose or know) hides the fact that the encryption direction reverses: protect writes a new envelope around the page bytes; remove opens an existing envelope you can already read by typing the key. Mixing the two pages up costs a round trip when the file you have is already encrypted.

User password vs owner password: what each one actually restricts

PDF security has two password concepts and they do different jobs. A user password (open password) blocks opening the file at all; the reader must enter it before seeing any content. An owner password (permissions password) can restrict actions like printing or copying after the file is open. This tool sets the open password only - the lock that requires a password before any page renders. It does not set an owner / permissions password.

Choosing a PDF password that resists the common attacks

A password that takes a modern GPU more than a few hours to try every combination of is strong enough for most business documents. Target length is twelve characters or more, mixing cases, digits, and at least one punctuation mark. Avoid words from any dictionary, any date associated with the document (year published, contract date, employee hire date), and any string derived from the filename. Passphrases of four unrelated words remain the strongest memorable option for a PDF you need to share and then forget about. If the document is archival, consider encrypting the file inside a ZIP with a second, separate password - the PDF password blocks the viewer, the ZIP password blocks the byte-level file until the passphrase is entered.

Privacy and how this tool handles the password you set

To encrypt the PDF, the file is uploaded over HTTPS to our processing service along with the password you enter. The service generates an encrypted copy and returns a download link. Files are removed after a short retention window.

Key features of our PDF password protection tool include:

• Easy Encryption: Add a strong password to your PDF in seconds.
• Secure upload: Your PDF is sent over HTTPS and encrypted server-side, then returned as a download-ready file.
• Cross-Platform Compatibility: Use on any device-no software download required.
• Free to Use: Encrypt your PDFs online at no cost.
• Open-password lock: The output PDF requires the password to open in any PDF reader.

This tool provides a quick, reliable way to enhance the security of your documents, making it ideal for personal and professional use. Secure your PDFs today with simple, effective password protection.

Need the inverse workflow? To unlock a PDF you’re allowed to open, use Remove PDF Password (you still need to know the password). If you’re encrypting a form-filled document, run Flatten PDF first so filled fields and annotations become part of the final page content before the password layer is applied.

Unsure which password you are setting? Read PDF password types - owner vs user for the distinction most PDF tools leave unexplained: the user password blocks opening; the owner password blocks copy/print even after the file is open. Picking the wrong one is the single most common PDF-security mistake.

Why this page is the encrypt-side of the pair. Protect-PDF and Remove-PDF-Password sit side by side in the PDF tools list, but they answer different first-step questions. This page asks for a NEW password to apply: the input field on the tool above is where you decide what string a future reader will have to type to open the file. The companion Remove PDF Password page asks for the EXISTING password to verify before it writes out an unlocked copy. Pick by the question you have to answer: “What password should the recipient type to open this?” → Protect. “What password did the sender give me so I can open this?” → Remove.

What happens after you click Encrypt

Once the file is on the tool and the passphrase is in the box, clicking Encrypt starts a brief upload-encrypt-download round trip and a download link for the protected copy appears in step 3 of the tool above. If the file slot is empty when you click Encrypt, the tool surfaces an inline error rather than silently failing, so you can re-upload the source without losing the passphrase you already typed. The original file you uploaded stays unchanged on your disk; the protected copy is a brand-new file that lands in your downloads folder when the link is clicked, and the passphrase you typed is the one the recipient will need to open it.

← Back to PDF Tools - the full set of PDF utilities (split, merge, compress, flatten, password add/remove) lives on the hub.