How to Password Protect a PDF: Passwords, Permissions and What a Lock Really Buys You
A PDF travels further than you ever intended. It gets forwarded, printed, dropped into a shared drive and attached to a reply you were never copied on. A password on the file itself puts a door in the middle of that chain: whoever ends up holding the document still has to know something before they can read a word of it. This guide covers how to password protect a PDF, what an open password and an owner password each control, which permissions you can switch off, and — just as important — what a locked PDF does not protect you from.
1. The Two Passwords Every PDF Can Carry
Most people think a PDF has one password. It has room for two, and they do completely different jobs. The distinction is written into the format itself — the standard security handler described in ISO 32000-1, the published PDF specification — so the lock you add here is the format’s own standard password security rather than anything proprietary, and the common desktop and mobile readers prompt for the password rather than needing something installed first.
User password (to open)
The one everybody means by “a password on the PDF”. Without it the document will not open at all — no preview, no thumbnail, no text. The tool above requires this one; leave it empty and it will tell you so rather than producing an unlocked file.
Owner password (to change the rules)
The permissions password. It governs who may lift the restrictions you set — re-enable printing, allow copying, remove the lock entirely. It is optional here, and if you leave it blank the tool reuses your open password.
That default is worth pausing on, because it decides whether your restrictions mean anything. If both passwords are identical, everyone you gave the open password to can also change the permissions. When you genuinely want to restrict PDF permissions — share a report that may be read but not reprinted, say — set a separate owner password and keep it to yourself. When you simply want the file unreadable to strangers, one password is enough and the second field can stay empty.
2. How to Password Protect a PDF Online Free (Step-by-Step)
No account, no email address, no trial counter. To add a password to a PDF with the tool at the top of this page:
Add your PDF
Drop a .pdf onto the panel or click to browse. One document at a time, and only .pdf is accepted — anything with the wrong extension is turned away before you type a password.
Set the password and rules
Type the password readers will need to open the file. Add a separate owner password if you want to, then tick the four permission switches to suit the document.
Download the locked file
Press Encrypt & Protect. Your document arrives back named after the original with -protected on the end, so the locked copy never overwrites your working one.
That is the whole job. Nothing is stamped across the pages, no trial badge is appended, and there is no queue to sit in. The result is an ordinary PDF that happens to be locked, so it opens on a phone, a laptop or a work machine with nothing to install. If you need to password protect a PDF on a phone, the same page does it — there is no separate app and no store detour.
The extension check is a name check, not an inspection of the contents, so a file that is a PDF in name only — a renamed document, or a download that was truncated on the way in — gets as far as the password screen. When the document then turns out not to be readable, the tool reports the error and stops. You get a message rather than a broken download, which is the outcome that matters, but it is worth knowing that a damaged file is caught at that point rather than at the door.
3. Printing, Copying and Editing: What Each Permission Controls
Beneath the password fields sit four switches. They are how you stop someone editing your PDF or disable copying text from a PDF without hiding the document from the people who are meant to read it.
- Allow printing — on by default. Switch it off for a document you want read on screen and not left on an office printer tray.
- Allow copying text & graphics — on by default. Switch it off and readers cannot select and paste your wording elsewhere, which is the usual request for quotations, proposals and course material.
- Allow modifying the document — off by default, and the one that makes a read-only PDF read-only. Signed letters, invoices and final contracts belong here.
- Allow comments & annotations — off by default. Turn it on when you are circulating a draft for markup and still want the underlying text left alone.
An honest word about permissions
Permission flags are instructions carried inside the file and honoured by reader software. Mainstream readers respect them, which covers virtually everyone you will ever send a document to. They are not a physical barrier, though: anyone determined enough can still photograph a page or retype a sentence. Treat restrictions as a clear statement of intent that stops honest accidents, and treat the open password as the part that actually keeps the file shut to a casual recipient.
Where the material would genuinely damage someone if it went astray, do not let the password on the file be the only control standing between it and the wrong reader. Send the document through a channel you actually trust, keep the distribution list as short as the job allows, and say plainly in the covering message that it is not to be forwarded. A file password is one layer among several, and the sensible way to use it is as the layer that stops an accident — not as the reason you stopped thinking about the other layers.
4. Choosing a Password You Will Not Lose
A lock is only as good as the key, and the most common failure in this whole category is not a broken password — it is a forgotten one. Once a PDF is encrypted there is no reset link, no security question and no back door. We cannot recover it, because nothing about your file or your password is kept.
Length beats decoration. Modern guidance from the NIST Digital Identity Guidelines (SP 800-63B) moved away from forced symbol-and-number recipes and towards long, memorable passphrases, because a four-word phrase is both harder to guess and far easier to remember than a mangled eight-character scramble. Three practical rules:
- Use a passphrase, not a word. Four unrelated words beat a name with a birthday appended.
- Never reuse an account password. A PDF password is travelling with the file to whoever you send it to; it should not be the same string that opens your email.
- Send the password separately. Emailing a locked confidential PDF and its password in the same message defeats the entire exercise. Send one by mail and the other by message or phone.
Keep the unprotected original somewhere safe as well. The tool writes a new -protected.pdf file rather than replacing your source document, precisely so that a forgotten password costs you an inconvenience rather than the content.
5. What This Tool Will Not Do
Plenty of people arrive at a page like this one searching for the opposite job, so it is fairer to say plainly what is out of scope than to let you find out halfway through.
It adds protection, never removes it
- No unlocking here — that is a separate tool
- No password recovery or cracking
- An already-locked PDF cannot be re-protected
- No way for us to open what you have locked
And a few things it is not pretending to be
- No redaction — hidden text stays in the file
- No expiry dates or revocable links
- No digital signatures or certificates
- One document per run, not a batch queue
The third point on that first list needs spelling out, because it is the one that costs people work. An already-locked PDF cannot be re-protected, and the tool does not stop you trying: feed one in and you will get a file back that no password opens — not the password it already had, and not the new one you just typed. Nothing about that copy can be undone afterwards. So if you need to change the password on a protected document, or change which permissions it carries, start from an unlocked copy: either the unprotected original, or the output of the PDF unlocker, which takes the current password and hands back a copy with no lock on it. Then protect that copy here. If the original is gone and the password with it, whoever locked the file in the first place is the only route back to a version anyone can work with.
The redaction point deserves a sentence of its own too, because it catches out serious organisations. Drawing a black box over a paragraph, or covering it with a shape, hides it from your eyes and not from the file. A password stops the wrong people opening the document; it does nothing about sensitive text still sitting inside it. If a section must not exist, delete the page with the PDF page remover or rebuild the document from only the pages you want using extract pages before you lock it.
6. Protect Last: Where Locking Fits in a Document Workflow
Encryption is the final step, not the first. A locked PDF is a closed box as far as these tools are concerned — none of them can merge, compress, convert or reorder a file they cannot open. Do the shaping first and the locking afterwards, and you will never have to undo your own security to make one small change.
A sensible order for a document going out to a client:
- Assemble the pack with the PDF merger and put the sections in order with the PDF organizer.
- Do your editing while the file is still open — pull the text into Word with the PDF to Word converter if wording needs changing, or fix a filled form with the PDF flattener.
- Get it under the mail server’s attachment limit with the PDF compressor, since compression here cannot run once the file is encrypted.
- Then come back here and encrypt the PDF before emailing it.
This is also the answer to a question we get in a dozen phrasings: why will your other tools not read my file? If a document refuses to load anywhere on this site, check whether a password was put on it at some earlier stage. Start again from the unprotected original, make the changes, and lock the finished copy last.
7. Why Cortexis Is the Best Free PDF Password Protector
Any number of sites will lock a PDF with a password. Most turn it into an obstacle course of accounts, counters and upsells first. Here is what is different, stated plainly enough that you can check every line for yourself.
Genuinely free, no account
No sign-up, no email, no card and no seven-day countdown. The tool on this page is the entire product.
Real permission control
Printing, copying, modifying and annotating are four separate switches, not one blunt "secure" checkbox you cannot inspect.
Your documents stay private
Files are never stored on our servers, never queued, never logged and never retained after your session.
Nothing is used for training
Your documents are never fed into training data or analytics. A confidential file stays confidential by policy, not by luck.
No watermark, no imposed limit
The protected PDF comes back clean, with nothing stamped across the pages, and there is no page count or file-size cap imposed as policy. Very large or image-heavy documents are the honest exception — heavy files are heavy work, and one may not get through.
Your original is left alone
The lock is written to a new -protected.pdf copy, so you always keep an unencrypted master to work from.
It sits inside a wider set of free document tools built on exactly the same terms, so the file you lock today was assembled, trimmed and shrunk without paying for any of it either.
8. Frequently Asked Questions (FAQ)
How do I password protect a PDF for free without installing anything?
Add your PDF to the tool at the top of this page, type the password that will be needed to open it, choose which permissions to allow, and download the protected copy. There is no account, no watermark and nothing to install — and it is free every time, not free for the first three files.
What is the difference between the user password and the owner password?
The user password is required to open the document at all. The owner password governs who may change the restrictions you set, such as re-enabling printing or copying. If you leave the owner field empty, your open password is used for both — which is fine for simple secrecy, but set a different owner password if you want your permission settings to hold.
Can you remove a password from a PDF or recover one I have forgotten?
Not with this tool, which only adds protection. Removing a password you know is the job of the PDF unlocker elsewhere on this site: give it the open or owner password and it returns a copy with no lock. Recovering a password you have forgotten is not possible here or anywhere else on our site — there is no back door, and nothing about your file or your password is kept, so there is nothing for us to look up. Always keep the unprotected original; the tool deliberately saves the locked version as a separate -protected.pdf file for that reason.
How do I stop people copying text or printing my PDF?
Untick "Allow copying text & graphics" and "Allow printing" before you lock the file. Those restrictions are carried inside the document and honoured by mainstream PDF readers. They stop casual reuse rather than a determined person with a camera, so treat them as a statement of intent and let the open password do the work of keeping the file shut.
Is it safe to password protect a confidential document here?
Your files are never stored on our servers, never queued or logged, and never retained after your session, and they are never used for training or analytics. Nothing you protect is kept. Send the password to your recipient through a different channel than the file itself, and for material that would be damaging in the wrong hands keep the distribution list short rather than relying on the file password alone.
Can I change the password on a PDF that is already protected?
Yes, in two steps. Putting the locked file straight through this tool will not work — what comes back opens with neither the old password nor the new one, and that copy cannot be repaired. Instead, remove the current password with the PDF unlocker first, then lock the unlocked copy here with the password and permissions you now want. Keep an unprotected copy safe for the next time the terms change.
Will a password protected PDF open on a phone or on someone else’s computer?
In the common readers, yes. The lock is the PDF format’s own standard password security, so mainstream desktop and mobile readers on phones, tablets and laptops recognise it and simply ask your recipient for the password, with nothing special to install at the other end. More limited viewers — some e-reader devices and lightweight in-app previewers among them — may decline to open a protected file at all rather than prompting, so if your recipient reads on a device like that, expect to send the unlocked document by another route.
Preparing the document before you lock it? Use the PDF splitter to send only the section that concerns your reader, the fillable PDF builder to add form fields first, or the PDF to JPG converter when a preview image is all anyone needs. And if you would rather understand document security than only use it, our free full-stack web development course covers the authentication and file-handling groundwork behind tools like this one.