How to Password-Protect a PDF for Free (Real AES-256 Encryption)
You need to email a contract, a payslip, a scan of your ID or a medical report — and you'd rather not have it sitting readable in someone's inbox forever. A password on the PDF itself is the simplest fix. Here's how to add one in about a minute, without installing anything or uploading your file anywhere.
Why put a password on a PDF
Email and chat apps keep copies of attachments in places you don't control — backups, shared computers, forwarded threads. A password makes the file itself unreadable without the key, no matter where a copy ends up. It's worth doing for anything personal or confidential: tax and bank documents, HR paperwork, ID scans, draft contracts, anything with an address, a number or a signature you wouldn't hand to a stranger.
Step-by-step guide
- Open the Protect PDF tool and drop in your PDF.
- Make sure "Add a password" is selected.
- Type your password, then type it again under "Confirm password" so a typo can't lock you out.
- Optional: tick "Also save the password in a text file". You get a small .txt next to the PDF, named after it, so the password isn't lost — keep that file somewhere separate from the PDF.
- Click "Protect & Download." You get a new file ending in -protected.pdf; your original stays untouched.
Choosing a password that actually protects
- Length beats cleverness. A phrase of four or five random words is far harder to guess than a short password with a symbol in it.
- Send the password separately. If you email the PDF, give the password by phone, text message or a different app — never in the same email.
- Don't reuse a password from your email, bank or any other account.
One thing to know before you start
There is no "forgot password" button. AES-256 encryption is designed so that nobody — including PDFLantern, which never sees your file — can open it without the password. If you lose it, the file is gone for good. That's why the text-file option exists, and why it's smart to keep an unprotected original somewhere safe if the document matters.
Frequently asked questions
Is my PDF or my password uploaded anywhere?
No. The encryption happens locally in your browser. Neither the file nor the password is ever sent to a server.
How strong is the protection?
It uses AES-256, the strongest encryption standard PDF supports. In practice, the weak point is almost always the password you choose, not the encryption.
Can I open the protected PDF on my phone or in other programs?
Yes. Modern readers — Adobe Acrobat, Chrome, Edge, Firefox, macOS Preview and the built-in viewers on iPhone and Android — ask for the password and open it normally. Very old PDF software from before AES-256 may not.
What if I forget the password?
It can't be recovered — not by us, not by anyone. Check your password manager or the text file you saved, or ask whoever you shared it with. This is also why we recommend keeping an unprotected original.
Does it change anything inside the PDF?
No. Text, images and layout stay exactly as they were; the file is just locked. Anyone who has the password sees the document the way you made it.
What if my file already has a password?
The tool notices and switches to "Remove the password" mode, where you enter the current password to unlock a copy. Our guide on removing a PDF password covers that.