Sending a PDF containing sensitive information — a contract, a financial statement, personal records — without a password is like leaving a sealed envelope unsealed. Anyone who intercepts it, gets forwarded it accidentally, or finds it on a shared drive can open it immediately. Adding a password takes about ten seconds and changes that completely.
The Two Types of PDF Passwords
PDF supports two distinct types of password protection, and it's worth understanding the difference before you apply one:
| Password Type | What It Does | Who Needs It |
|---|---|---|
| Open Password (User Password) |
Required to open and view the document at all. Without it, the PDF cannot be read. | Anyone who wants to open the file |
| Permissions Password (Owner Password) |
Restricts specific actions — printing, copying text, editing — without blocking viewing. | Only needed to change the restrictions |
You can apply one or both. For most security purposes — preventing unauthorized viewing — an open password is what you want. Permissions passwords are useful when you want recipients to be able to read the document but not copy or print it.
How to Password Protect a PDF at PDFToolShack
- Open the Protect PDF tool
- Upload your PDF — drag and drop or click to browse
- Enter your password — choose a strong one (more on this below)
- Set permissions if needed — restrict printing, copying, or editing
- Click Protect — the encryption is applied in your browser
- Download your protected PDF
Your file is processed entirely in your browser. The original document and your password are never transmitted to any server.
What Encryption Is Applied?
PDFToolShack's Protect PDF tool applies 256-bit AES encryption — the same standard used by governments and financial institutions. This is the strongest encryption available in the PDF specification and is effectively unbreakable with a strong password.
Older PDF tools sometimes use 128-bit RC4 encryption, which is outdated and considerably weaker. If you're protecting sensitive documents, make sure the tool you use specifies AES-256. See our deeper dive on PDF encryption standards for more detail.
How to Choose a Strong PDF Password
The encryption is only as strong as the password. A common mistake is using a short or predictable password that can be cracked by brute force. For a PDF containing genuinely sensitive information:
- Use at least 12 characters — length matters more than complexity
- Mix letters, numbers, and symbols — avoid dictionary words alone
- Don't reuse passwords from other accounts
- Avoid obvious choices — birth dates, names, "password123"
- Store it somewhere secure — a password manager, not a sticky note
A password like T!ger$2025#Nov is vastly harder to crack than tiger2025 despite both being memorable.
PDF Permissions — What Can You Restrict?
The permissions password lets you control what recipients can do with the document even after opening it:
- Printing — prevent the document from being printed, or allow only low-resolution printing
- Copying text and images — prevent content from being copied to the clipboard
- Editing — prevent modifications to the document content
- Form filling — allow or disallow filling in form fields
- Commenting — allow or disallow annotations
Note that permissions restrictions are enforced by the PDF reader software. Most legitimate PDF readers respect them, but they are not a substitute for an open password when you genuinely need to prevent access — a sophisticated user could potentially work around permissions-only restrictions.
What If You Need to Remove the Password Later?
If you applied an open password and later need to share the document openly, you can remove it using the Unlock PDF tool — provided you know the original password. Simply upload the protected PDF, enter the password, and download the unlocked version.
- PDFs support two password types: open passwords (block viewing) and permissions passwords (restrict actions)
- For preventing unauthorized access, an open password is what you need
- PDFToolShack applies 256-bit AES encryption — the strongest available in the PDF standard
- Your password and file never leave your browser during protection
- Use at least 12 characters with mixed types for a strong password
- Permissions restrictions can be bypassed by determined users — pair with an open password for real security
Protect your PDF with a password — free.
256-bit AES encryption, applied in your browser. Your file never leaves your device.