Protect PDF – Add Password Free Online
Lock your PDF with a real password.
Drop a PDF, set a password, and download a copy that asks for that password before it opens. Everything happens in your browser — your file never leaves your device.
Drop your PDF here
or browse your files
100% private — files are processed on your device
Related Tools You Might Need
How to Password-Protect a PDF Online Free: Step-by-Step Guide
Picture this: your accountant emails asking for last year's bank statements, and you realize the PDF sitting in your downloads folder has your account numbers, your address, everything. Anyone who picks up your laptop at a repair shop could open it. That queasy feeling is exactly what this tool is for — ten seconds, one password, and that file becomes a locked box.
Step 1 — Drop your PDF in. Drag it onto the dotted box or click to browse. The file opens right on your device; nothing uploads anywhere, so the sensitive document you are trying to protect is never sent to a server in the first place. (Think about that for a second: uploading a confidential file to some website just to password-protect it would defeat the whole purpose.)
Step 2 — Pick a password worth having. The strength meter is honest, not flattering: under 6 characters is weak, 10+ is strong, 14+ is very strong. A password like contract2026 will fall to guessing in minutes; a phrase like blue-tiger-eats-42-mangoes will outlive us all. Type it twice so a typo does not lock you out of your own file.
Step 3 — Decide the permissions. By default, anyone with the password can print, copy, and edit. If you are sending a quote to a client and do not want them lifting your text, uncheck copying. Just know the honest truth, stated plainly below: these permission flags are requests, not walls.
Step 4 — Hit Protect and download. You get a brand-new PDF that asks for the password the moment anyone opens it. Your original file is untouched — keep it somewhere safe, or delete it if the protected copy is now the only one that should exist.
What "Protect" Actually Means Here
Two separate things happen, and it is worth knowing the difference:
- The open password encrypts the entire file. Without it, the content is scrambled bytes — no reader on earth shows a single word. This is the real lock.
- The permission flags (print / copy / edit) are instructions tucked inside the file: "dear reader, please don’t let the user copy text." Honest apps — Adobe Reader, Chrome, Preview — obey them. But they are not encryption; determined software can strip them the way our Unlock PDF approach demonstrates. Treat them as a polite fence, not a vault.
When This Honestly Shines
- Emailing sensitive documents: bank statements, contracts, medical reports, salary slips — anything that would ruin your week in the wrong inbox.
- Shared computers and USB sticks: a password on the file protects it even when the device itself is not yours.
- Client deliverables: send the file now, share the password over a separate channel (a call, a different app) — now an intercepted email alone is useless.
When It Will NOT Work Well (Read This Before You Complain)
- There is no password recovery. None. The encryption is real, which means we cannot reset it for you either. If you forget the password, that copy is a paperweight. Write it down.
- Weak passwords are decoration. A 4-letter password on 128-bit encryption is like a bank vault with a screen door. The meter is there for a reason — listen to it.
- Permissions are not DRM. Unchecking "allow copying" stops casual copying in normal readers. It will not stop someone determined. If the content must never leave, do not send the file at all.
- Already-locked files are refused. If a PDF already asks for a password, protect it is a no-op — the tool tells you so instead of pretending.
- This is 128-bit RC4 (PDF Standard security, revision 3) — the classic, everywhere-compatible encryption, not military-grade AES-256. For everyday confidential files it is the right trade-off between safety and "opens everywhere."
Good to Know
The protection is applied with genuine PDF Standard encryption (V=2, R=3, 128-bit RC4) — the same family of protection Adobe’s own tools produce, which is why the locked file opens in every PDF reader on the planet once you type the password. The password check, the scrambling, and the permission flags are all written into the file itself on your device; no account, no server, no trace.
Common Questions
Is my file uploaded anywhere?
No. The PDF is read from your disk, encrypted in your browser’s memory, and the protected copy is downloaded back to you. Close the tab and nothing of your file remains anywhere but your computer.
What happens if I forget the password?
The file cannot be opened — by you, by us, by anyone. Real encryption has no back door and no reset link. Keep the password in a password manager or written somewhere safe before you delete the original.
Can I remove the password later?
Yes, if you know it: open the protected PDF in any reader, print or save it as a new PDF without a password. (That is also why you should never rely on a password to stop someone you gave the password to.)
What is the owner password for?
It is a second, separate password that always opens the file with full rights. Handy when you share the user password with a client but want a master key for yourself. Leave it blank and it simply defaults to your main password.
Will the protected PDF open on phones and Macs?
Yes. The encryption used here is the classic PDF standard — Adobe Reader, Chrome, Edge, Firefox, Preview on Mac, and every phone PDF app know how to ask for the password and unlock it.
Does protecting change my document?
Not a pixel. Text, images, layout, and metadata stay exactly as they were — the tool only scrambles the bytes and stamps the lock instructions on top, saving a brand-new file.