How to Password Protect a PDF Properly: Encryption, Permissions and Sharing the Password

What encryption protects

When you set an open password, the PDF's contents are encrypted. Text, images and fonts are stored as scrambled data, and a reader can only turn them back into a document once the right password is entered. Without the password there is no shortcut: nobody can read the text by opening the file in an editor or a different program.

The PDF standard has had several encryption methods over the years. Old files may use RC4 with 40 or 128-bit keys, which can be broken with ordinary hardware and should no longer be relied on. Current tools use AES-256, introduced with Acrobat 9 in 2008 and kept in PDF 2.0. Protect PDF always writes AES-256, whatever version the original file had, so an old file does not quietly get old encryption. Every current reader, from Acrobat and macOS Preview to Chrome, Edge, Firefox and the mobile apps, opens these files.

Some things stay visible even in an encrypted PDF: the file name, its size and, depending on the tool, the page count shown in a file manager. Name the file neutrally, for example contract-2026.pdf rather than the client's full name and the reason for the termination.

The password is the real protection

AES-256 itself is not the weak point. The password is. Anyone holding the encrypted file can try passwords offline as fast as their computer allows, without lockouts or rate limits. A short word, a name or a date of birth falls quickly to such a guessing attack; a long passphrase does not.

Length beats complexity. A phrase of four or five unrelated words, such as lantern-cobalt-river-hinge-mild, is easier to type and far harder to guess than a short string with a few special characters. If you protect files regularly, let a password manager generate and store a new password for each document instead of reusing one.

There is no recovery. If you forget the password, the file cannot be opened, not by you, not by Toolula and not by anyone else. Keep the unencrypted original somewhere safe, or store the password in your password manager before you send the file.

• At least 12 characters, better a passphrase of four or more random words
• A new password per document or recipient, never your email or bank password
• Stored in a password manager before the file leaves your device

Open password and permissions: two different things

PDF encryption knows two passwords. The open password, also called the user password, is needed to view the document. The permissions password, also called the owner password, controls what a reader may do once the document is open: print it, copy text and images, change pages, add comments or fill in forms.

In Protect PDF you type the open password under Set a password. Under Permissions you can untick printing, copying, editing or comments and form filling. If you also set a permissions password, it lifts these restrictions for whoever knows it. If you leave it empty, Toolula locks the restrictions with a random password nobody knows, because a permissions password equal to the open password would lift them for every reader.

Restrictions are a request to the reading software, not a technical barrier like the open password. Acrobat, Preview, Chrome and other standard readers respect them, but some programs ignore them, and no setting can prevent a screenshot or a photo of the screen. Use permissions to signal intent and to stop casual copying, for example of a draft you don't want edited, but never as the only protection for confidential content.

Step by step with Protect PDF

Finish the document first. Redact, add page numbers, compress or merge before you encrypt, because an encrypted file cannot be opened by other tools until it is unlocked again. Encryption is the last step of a workflow, which is also why Toolula's suggestions for the next step end after Protect PDF.

• Drop the PDF on the Protect PDF page; it stays on your device.
• Type the password under Set a password and use the eye button to check it for typos.
• Optional: open Permissions and untick what readers may not do.
• Click Protect PDF and download the protected copy.
• Open the copy once with the password before you send it, so you know it works.

Sending the file and the password

The most common mistake is to send the password in the same email as the file, or in a reply a minute later. Anyone who gets into that mailbox, or receives the forwarded thread, then has both. Use a second channel: a text message, a phone call, a messenger, or a password agreed in person in advance.

For recurring exchanges, such as monthly payroll documents for a tax adviser, agree on one long password per recipient once, in person or by phone, and use it for every file you send them. That avoids sending passwords around every month, and the recipient doesn't have to search for the right one.

Think about what the file still reveals. Encryption hides the content but the document's own metadata, such as the author name or the template title, comes along inside the file for anyone who can open it. Run Remove PDF Metadata before you protect the file if the recipient should not see such details; the guide Remove Metadata Before Sharing explains what these fields contain.

When a password is not enough

Encryption protects a file in transit and at rest. It does not help once the recipient has opened it: they can save an unprotected copy, print it or pass the password on. If certain passages must never reach the recipient, remove them before sending; the guide Redacting a PDF Properly shows how to do that so the text is really gone, not just covered.

A password also says nothing about who created the document or whether it was changed afterwards. That is what a digital signature is for. Note that the two don't simply stack: any change after a certificate signature, encryption included, breaks the signature. Toolula's suggested workflow therefore never encrypts a signed file; send signed documents through a protected channel, such as the recipient's secure upload portal, instead.

Finally, protection on a PDF does not replace other duties. Under the GDPR, encryption is one of the measures Article 32 names for protecting personal data, but it is not a licence to send data to people who should not have it in the first place.

Opening and removing the password later

Recipients open the file in any reader, which asks for the password. If you need to work on your own protected file again, for example to add pages, use Unlock PDF with the password you know: it saves an unprotected copy, again without uploading anything. Unlock PDF does not break passwords; it only works if you have the right one.

Frequently asked questions