Password protect a PDF

How does password protecting a PDF work?

Password protecting a PDF encrypts every string and stream in the file with a key derived from the password, so a reader shows nothing until the right password is typed. This tool writes AES-256 encryption (standard security handler, version 5, revision 6), the method defined in PDF 2.0 and published as ISO 32000-2. The cipher is the Advanced Encryption Standard that NIST specifies in FIPS 197 (AES), used here with a 256-bit key. It never writes the older RC4 or AES-128 methods.

The work runs in a background worker inside the browser tab. The PDF is opened, encrypted with the open password and saved, and then the saved bytes are opened again with the same password as a self-check: the output must carry an encryption dictionary and must show the same page count as the original. Only then is the download offered. If that check fails with the compact object-stream layout, the file is saved again in the plain layout that every reader understands.

What is the difference between a user password and an owner password?

A user password, also called the open password, is required to view the document, while an owner password only controls who may change the security settings and lift the printing, copying and editing limits. Both live in the same encryption dictionary, but only the user password keeps the content unreadable to someone who lacks it.

If the owner password option is left off, the tool generates a random 32-character owner password and discards it, so nobody, including the person who protected the file, can lift the restrictions by typing a password. The owner password must differ from the open password. Identical values are rejected, because a reader would then grant full owner rights to everyone who can open the file, which makes the permission settings pointless.

Do print and copy restrictions really stop people?

Not completely: permission flags are instructions that reader apps choose to follow, not encryption of the content. Acrobat, Apple Preview, Chrome, Edge and most mobile viewers respect them, but anyone who can open the file can still take screenshots, retype the text, or use software that ignores the flags. Treat permissions as a clear statement of intent rather than a hard barrier.

The four checkboxes map onto the permission bits in the PDF standard. Printing is allowed at high resolution or blocked entirely. Copying covers selecting and extracting text and images. Editing covers content changes and also page assembly, such as inserting, deleting or rotating pages. Comments and form filling are switched together. Text access for screen readers is always left on, so a protected file stays usable with assistive technology.

How strong should a PDF password be?

A PDF password should be at least 12 characters, or four or more unrelated words, because AES-256 cannot be broken directly and attackers guess passwords instead. Guessing tools try millions of common words, names and keyboard patterns per second against a downloaded file, with no lockout. Length beats cleverness: "harbor candle mosaic twelve" is far harder to guess than a short mix like "P@ss1" and much easier to remember. The strength meter scores the password as it is typed.

• Aim for 12 characters or more.
• Avoid names, birthdays and the file name.
• Don't reuse a password from an online account.
• PDF passwords are limited to 127 characters; longer ones are rejected.

When is it worth adding a password to a PDF?

A password is worth adding whenever a PDF with personal or financial details travels by email, chat or a shared cloud link, where it can be forwarded, synced to other devices or left on a lost laptop. Encryption keeps the contents unreadable wherever the file ends up. It suits payslips, tax returns, contracts, medical letters, bank statements and anything carrying ID numbers.

Send the password through a different channel than the file. If the PDF goes by email, share the password by text message or say it on a call. Putting both in the same email gives almost no protection, because anyone who gets the message, or later gets into that mailbox, receives the lock and the key together.

What does PDF encryption not protect?

Encryption does not hide anything from people who hold the password, and it does not remove content or metadata from the document. To take details out before sharing, black them out with Redact PDF first, and clear the author name and software details with Remove PDF Metadata. The protected copy keeps the existing document information, except that the producer field and modification date are updated when the file is saved.

If a PDF is already protected, enter its current password first; the old password and permissions are then replaced by the new settings. Files up to 200 MB work in most browsers, though very large scans may be slow on older phones. Digitally signed PDFs lose their valid signature when they are encrypted, because the file is rewritten, so protect the document before it is signed rather than after.