Password Protect a PDF

A PDF without password protection is an open document — anyone who receives it, stumbles across it in a shared folder, or intercepts it in transit can read it, copy from it, and print it. For most everyday documents that's completely fine. But for anything containing sensitive information — client contracts, personal financial records, medical documents, confidential business proposals, HR files, or legal correspondence — unprotected PDF distribution creates real risk.

Password protection adds a layer of access control that doesn't require any special software on the recipient's end. Any PDF viewer — Acrobat, Preview, browser viewers, mobile apps — supports password-protected PDFs and will prompt for the password before displaying content. The encryption used in modern PDFs (AES-256) is robust enough that a file protected with a strong password is effectively secure against brute-force attacks.

Beyond security, password protection sends a signal. When you receive a password-protected PDF, it communicates that the sender regards the contents as sensitive and expects them to be handled accordingly. It creates an implicit record that the recipient was aware of the document's confidential nature — which can matter in legal or compliance contexts.

PDF security supports two distinct types of password, which serve different purposes and can be used independently or together.

An open password (also called a document open password or user password) prevents anyone from viewing the PDF at all without the correct password. The file appears as a PDF in a file browser, but attempting to open it immediately prompts for the password. This is the most common type of protection and the one most people think of when they talk about password-protecting a document.

A permissions password (also called an owner password or master password) allows the PDF to be opened and read freely, but restricts what recipients can do with it. Depending on the settings, it can prevent printing, prevent copying text, prevent editing, or prevent adding annotations. The recipient opens the document normally and sees the content, but attempts to print or copy text are blocked by the PDF viewer.

In practice, permissions passwords are less useful than they appear because they can be bypassed with widely available tools. Open passwords with proper AES-256 encryption, combined with a strong password, provide genuine security. Permissions passwords are more of a courtesy restriction than a true security measure.