How to Password Protect a PDF: 4 Free & Fast Methods

To password protect a PDF, open it in Adobe Acrobat Pro, go to File → Properties → Security, select Password Security, choose Acrobat 9.0+ compatibility for AES-256 encryption, and tick "Require a password to open the document." Free alternatives include Microsoft Word's export options, Mac Preview, LibreOffice 25.8+, and the qpdf command line. Always set a document open password rather than only a permissions password, because permissions restrictions can be stripped in seconds.

Now let me show you exactly how each method works.

I've sent thousands of PDFs over the years — contracts, invoices, tax documents, client proposals.

And here's the thing nobody tells you.

An unprotected PDF is basically a postcard. Anyone who gets their hands on it can read every word.

Why You Should Password Protect a PDF (Before You Send Another File)

Look, I get it. Adding a password feels like extra work. But consider what's usually sitting inside your PDFs: bank details, medical records, signed agreements, personal identifiers. PDF password protection encrypts the actual content stream — meaning the text becomes unreadable ciphertext without the key. It's not a suggestion box that politely asks people not to peek. It's real cryptography, standardized under ISO 32000-1, and it takes about forty seconds to set up.

Here's what document encryption actually buys you:

Prevents unauthorized access to sensitive files
Supports HIPAA and GDPR obligations
Stops content extraction, copying, and printing
Protects confidential documents even after they leave your inbox
Forms one practical layer of a broader digital security and privacy setup

Honestly? The effort-to-benefit ratio here is absurd.

The Two Passwords Nobody Explains Properly

Alright, this is the part most guides skip — and it's the single most important concept in this whole article. PDFs support two distinct password types, and confusing them is how people end up with files they think are secure. According to Adobe's official documentation, each one does a completely different job. Get this right and everything else falls into place.

The User Password (Document Open Password)

This is the real deal.

Without it, the file simply won't open. The content streams stay encrypted, and no software on earth can render them. When people say "I locked my PDF," this is what they should mean.

The Owner Password (Permissions Password)

This one's weaker than you'd expect.

An owner password — sometimes called a master password — controls what someone can do after they've opened the file. Think: disable printing, restrict editing, block copying.

But here's the uncomfortable truth. The qpdf documentation confirms that owner restrictions can be stripped by common tools without knowing the password at all. So treat permissions passwords as a guardrail against accidents — never as actual security.

AES-256 Encryption vs Everything Else

Now let's talk about the setting that genuinely determines whether your file is safe. PDF encryption has shipped in several flavors since the late 1990s, and some are now completely broken. Picking the wrong encryption algorithm means your password is decorative, so this bit matters more than the software you choose.

The oldest option, 40-bit RC4, arrived with Acrobat 3 back in 1996. Skip it entirely. The actual key is only five bytes long, which means it brute-forces in seconds no matter how clever your password is. 128-bit RC4 followed in 2001 with Acrobat 5, and while the longer key sounds reassuring, RC4 itself has since been broken. Length doesn't rescue a compromised cipher.

Things improved with PDF 1.6 in 2005, which introduced AES-128 encryption alongside Acrobat 7. That's genuinely acceptable security, and it's what Mac Preview produces today. The only catch is that recipients need Acrobat 7 or later to open the file.

Then came PDF 1.7 Extension Level 3 in 2008, which added AES-256 encryption with Acrobat 9. This is what you want. It requires Acrobat 9 or newer on the recipient's end — a bar practically everyone clears in 2026.

My rule is simple: always choose AES-256 unless you know for a fact your recipient is running genuinely ancient software.

Which PDF Encryption Tool Should You Use?

Before we get into steps, here's the honest breakdown. I've used every one of these in production, and they're genuinely not interchangeable — the free options have real ceilings, and the paid one earns its keep in specific situations.

Adobe Acrobat Pro runs around $19.99 a month on Windows and Mac, supports full AES-256, and is the only tool here offering granular permissions plus true content-removing redaction. It's built for professionals handling client files.

Microsoft Word comes free with Office and encrypts using AES during PDF export — but only in the desktop app. It's ideal for quick one-offs when your source document is already a .docx.

Mac Preview costs nothing, ships with macOS, and produces AES-128 files. Perfect when you need fast local encryption with zero installs.

LibreOffice 25.8 and later is free, cross-platform, and now supports AES-256. Frankly, it's the best free desktop option available.

qpdf is also free and cross-platform with AES-256 support, and it's unbeatable for batch jobs and scripting if you're comfortable in a terminal.

Online tools run in any browser and typically top out at AES-128. Use them for non-confidential files only — your document sits on someone else's server.

Is Acrobat Pro Actually Worth It?

For occasional personal use? Probably not — Preview or LibreOffice will do the job.

But if you handle client documents professionally, the calculation flips fast. Adobe Acrobat Pro is the only option that combines AES-256 encryption, certificate encryption for named recipients, genuine content-removing redaction, and per-permission control over printing resolution and form filling in one interface. Adobe offers a 7-day free trial, so you can encrypt your entire backlog before you're charged a cent.

One leaked contract costs more than a year of the subscription. That's the whole argument.

Method 1: Encrypt a PDF in Adobe Acrobat Pro

If you already pay for Acrobat Pro, stop reading other guides — this is your answer. It's the reference implementation, it handles both password types cleanly, and it gives you granular control over every PDF permission in a single dialog. Here's the exact sequence.

Step 1. Open your file in Acrobat Pro.

Step 2. Go to File → Properties, then click the Security tab.

Step 3. From the Security Method dropdown, choose Password Security, then hit Change Settings.

Choosing Your Compatibility Level

This dropdown is your encryption strength. Select "Acrobat 9.0 and later" to unlock AES-256. Anything lower silently downgrades you to RC4 or AES-128.

Step 4. Tick "Require a password to open the document." Type your password.

Setting Permissions Correctly

Step 5. Under permissions you can set Printing Allowed (None, Low Resolution 150dpi, or High Resolution), Changes Allowed, content copying, and screen reader access. Per Adobe's documentation, leave screen reader access enabled for accessibility unless you have a specific reason not to.

Step 6. Save the file. Done.

Alternatively, use All tools → Protect a PDF → Encrypt with Password for the streamlined version.

Method 2: Password Protect a PDF Free Using Microsoft Word

Don't have Acrobat? You probably already own a perfectly good encryption tool and don't realize it. Desktop Microsoft Word exports directly to an encrypted PDF using AES, and Microsoft has used AES since Office 2007. One warning first: Word Online cannot do this. You need the desktop app.

Open your document and click File → Export
Choose Create PDF/XPS Document
Before saving, click the Options button
Check "Encrypt the document with a password"
Enter and confirm your password, then Publish

Heads-up: re-saving a protected file to another format strips the protection entirely.

Method 3: Lock a PDF on Mac and iPhone

Apple bakes this straight into the operating system, which surprises most people I mention it to. Both Preview on macOS and the iOS Files app handle PDF password protection natively — no downloads, no uploading sensitive files to third-party servers, no subscription.

On macOS

Per Apple's official guide: open the PDF in Preview, choose File → Export, click Permissions, then select Require Password To Open Document. You can set a separate owner password there to gate printing and annotations.

On iPhone and iPad

Apple added native Lock PDF in iOS 16 back in 2022, and documents the current Preview method here.

Open the PDF, tap the arrow beside the filename, tap Lock, then toggle Require Password.

Pro tip: duplicate the file first. Otherwise you lose your unlocked original forever.

Two limitations worth knowing — iOS only locks PDFs stored locally, not in iCloud Drive. And Android has no native equivalent.

Method 4: qpdf for Batch Encryption

For developers and anyone comfortable in a terminal, qpdf is the most powerful free option available. It scripts beautifully, handles thousands of files at once, and supports every encryption standard the format allows.

bash

qpdf --encrypt "user_pw" "owner_pw" 256 -- input.pdf output.pdf

Want an open password only?

bash

qpdf --encrypt "my_password" "" 256 -- input.pdf output.pdf

Note that qpdf deliberately refuses to create weak files unless you force it with --allow-weak-crypto, and it blocks empty owner passwords on 256-bit files unless you pass --allow-insecure. That's good design.

Also worth knowing: LibreOffice 25.8 (released August 2025) finally upgraded its PDF export from RC4 to AES-256. If you're still on version 7.x, you're encrypting with broken crypto and don't know it.

Mistakes That Quietly Ruin Your Document Security

Even with perfect encryption, a few habits undo everything. I've watched smart people make all four of these, and the U.S. Department of State publishes its own guidance precisely because these errors are so common in professional settings. The Department of Energy does too.

Never email the password with the file. Send it out-of-band — text, phone call, anything separate.

Use a strong passphrase. A weak password makes AES-256 meaningless. Dictionary attacks crack "password123" instantly.

Redaction is not protection. Black rectangles drawn over text don't remove the underlying text. Extract the file and it's all still sitting there. This exact mistake has leaked classified material and personal identifiers in real public court filings.

Encryption alone isn't a strategy. If you're handling client or company files at any scale, per-file passwords need to sit alongside proper data loss prevention software — otherwise you're securing individual documents while the pipeline leaks.

There's no password recovery. None. By design. Microsoft's DocRecrypt only recovers files encrypted after it was deployed.

Frequently Asked Questions

Here are the questions I get asked most often about PDF encryption — short answers, no hedging.

Can you password protect a PDF for free?

Yes. Mac Preview, desktop Microsoft Word, LibreOffice 25.8+, and qpdf all add password protection at zero cost. LibreOffice and qpdf support full AES-256 encryption, matching what Acrobat Pro produces.

What happens if I forget my PDF password?

You lose the file. There's no official backdoor or recovery mechanism from Adobe or any other vendor — that's precisely the point of strong encryption. Store passwords in a password manager before you encrypt anything important.

Is AES-256 encryption safe for PDFs?

Yes. A 256-bit AES-encrypted PDF with a strong password is comparable in security to encrypting the file with gpg or openssl. The weak link is never the cipher — it's the password you chose.

Can someone remove a PDF password?

Owner passwords: yes, easily. Tools like qpdf strip permission restrictions without knowing the password at all. User passwords with AES-256: no, not unless your password is weak enough to brute-force.

How do I password protect a PDF on Android?

Android has no built-in option. You'll need a third-party app such as Adobe Acrobat for Android, or an online tool — though never use the latter for confidential documents.

Are online PDF protection tools safe?

For non-sensitive files, generally yes. Reputable services use TLS and auto-delete uploads. For anything confidential, use an offline method — your file sits on someone else's server either way.

What's the difference between encryption and restriction?

Encryption scrambles the content so it can't be read without a key. Restriction just sets flags asking the viewer to disable printing or copying. Only encryption is actual security.

The Bottom Line

Password protecting a PDF takes under a minute and shields you from a category of leak that's almost impossible to walk back.

Pick your method based on what you actually need. Choose AES-256 every time. Set a user password, not just permissions. Send the password separately.

And if you handle client files for a living, grab the Acrobat Pro trial and lock down your backlog this week.

Your future self will thank you.