A PDF containing confidential client data, a signed contract, sensitive financial reports, or private medical records should not be sent unprotected. Adding a password to a PDF takes under a minute and ensures only the intended recipient can open it. You can do it free, in your browser, without installing any software.
Types of PDF password protection
PDF supports two distinct types of password, and it is worth understanding both:
- User password (open password) — Required to open and view the document. Without this password, the PDF cannot be read at all. This is what most people mean when they say “password protect a PDF.”
- Owner password (permissions password) — Does not prevent opening the document but controls what the viewer can do with it: printing, copying text, editing, and adding annotations can all be restricted independently.
For most use cases, a user (open) password is the appropriate level of protection. Owner passwords without user passwords rely on PDF viewer compliance — they are not true encryption.
How strong is PDF password protection?
PDF password security depends on the encryption algorithm used:
- AES-256 encryption — The current standard. Extremely strong — brute-force attack on a good password would take longer than the age of the universe. This is what modern PDF tools use.
- AES-128 encryption — Still very strong for practical purposes, used in older PDF versions.
- 40-bit RC4 (PDF 1.1–1.3) — Outdated and easily cracked. Avoid any tool that only offers this level.
The encryption is only as strong as the password. A password like “password123” is trivially guessable even with strong encryption. Use the same principles as any secure password: length, complexity, and avoid dictionary words.
Step-by-step: adding a password to a PDF
- Open the PDF Password Protector and upload your PDF.
- Enter the password you want to set. Choose a strong, unique password — at least 12 characters including uppercase, lowercase, numbers, and symbols.
- Confirm the password in the second field to prevent typos.
- Set any additional permissions restrictions if needed (e.g. prevent printing or copying text).
- Click Protect PDF. The tool encrypts the PDF and makes it available for download.
- Test the download: open the password-protected PDF and verify it prompts for the password correctly before sharing it.
- Share the password with the recipient through a separate, secure channel — not the same email as the PDF attachment.
Best practices for sharing password-protected PDFs
- Never send the password in the same email as the document. If someone intercepts that email, they have both the file and the key. Send the PDF by email and the password by SMS, phone call, or secure message.
- Use a different password for each document. Reusing a single password means that if one is compromised, all your protected documents are at risk.
- Keep a record of the password somewhere secure. If you forget the password to your own document and lose the original unprotected version, recovery is extremely difficult.
- Consider document expiry. For highly sensitive documents, combine password protection with a note that the password will change after the review period — creating a natural access window.
Password protection vs digital signing
| Feature | Password protection | Digital signature |
|---|
| Prevents unauthorised viewing | Yes | No |
| Verifies document authenticity | No | Yes |
| Proves who signed | No | Yes |
| Detects tampering after signing | No | Yes |
| Use both together? | Yes — for maximum security, protect and sign |
Summary
Adding a password to a PDF is one of the simplest and most effective security measures for sharing sensitive documents. The ToolsGravity PDF Password Protector applies AES-256 encryption in seconds, then deletes your upload. Choose a strong, unique password, test the protected file before sending, and always transmit the password through a separate channel from the document.