Protect PDF
Add password protection to your PDF file. Your files are processed in your browser - nothing is uploaded to any server.
How to Password Protect a PDF
To password protect a PDF, upload the file, set a user password to restrict who can open it, optionally configure permission restrictions on printing, editing, and copying, then download the encrypted file. The entire process runs in your browser. No file is uploaded to any server.
How PDF Password Protection Works
PDF encryption uses two distinct password types that serve different purposes. The user password (also called the open password) is required to open and view the document. Anyone without it sees only an encrypted file they cannot read. The owner password (also called the permissions password) controls what authorized viewers can do with the document: whether they can print it, modify it, or copy text from it. These two passwords can be set independently, or you can use a single password for both roles.
When a PDF is encrypted, the document content is encoded using AES encryption. The password you set is used to derive the encryption key. Without the correct key, the content is unreadable regardless of which application attempts to open the file. Permission restrictions are stored as flags in the document structure and are enforced by the PDF reader, so their reliability depends on the viewer being used.
How to Add Password Protection to a PDF Using PDFDeal
- Upload your PDF. Drag and drop the file onto the tool or click to browse your device.
- Set a user password. This password will be required to open the document. Choose something strong and store it securely - it cannot be recovered if lost.
- Configure permission restrictions (optional). Use the advanced options to restrict printing, editing, or copying for anyone who opens the file.
- Download your protected file. Click the protect button. The encrypted PDF is generated in your browser and ready to download immediately.
User Password vs. Owner Password: Which to Use
The user password gates access to the file entirely. If you set one, anyone who receives the document must enter it before the content is visible. This is the right choice when you want to restrict who can open the file at all.
The owner password controls permissions only. A document protected solely with an owner password can be opened by anyone, but certain actions like editing or printing are restricted for users who do not know the owner password. This distinction matters when you want to distribute a readable document while preventing modification. PDFDeal lets you set both passwords independently or use a single password for both roles.
For the most thorough protection of sensitive information, consider using the redact tool to permanently remove confidential content before adding encryption, since password protection controls access but does not erase underlying data.
When to Password Protect a PDF
- Sending contracts, invoices, or proposals to clients via email.
- Uploading tax forms or financial statements to cloud storage.
- Distributing internal reports that should not be forwarded or modified.
- Sharing medical or legal documents with specific individuals.
- Submitting academic or research documents that should not be altered.
If you need to reduce the file size before sending, you can compress the PDF first, then apply protection. You can also read our PDF security guide for a broader overview of available protection options.
Watch: How to Encrypt and Lock a PDF File
FAQ
Upload your PDF to PDFDeal's protect tool, enter a user password, optionally configure permission restrictions, and click the protect button. The file is encrypted in your browser and ready to download immediately. No account or software installation is required, and the file is never uploaded to a server.
A user password (open password) is required to open and view the document. Without it, the file cannot be read at all. An owner password (permissions password) does not restrict opening the file but controls what actions are permitted, such as printing, editing, or copying text. A document can have both passwords set independently. If only an owner password is set, anyone can open the file but restricted actions are blocked by the PDF reader.
PDF password protection uses AES encryption. The password you set is used to derive the encryption key, which encodes the document content. Without the correct key, the content is unreadable regardless of which application attempts to open the file. AES is the same encryption standard used in secure file transfer and storage applications.
When protecting the PDF, open the advanced options and disable the modifying permission. This sets a permission flag in the document that tells PDF readers to block editing actions. The flag is enforced by the reader application, so its effectiveness depends on whether the reader respects PDF permission flags. Most standard PDF viewers do. For content that must not be changed under any circumstances, consider flattening or redacting it before adding protection.
When the copying permission flag is disabled during encryption, PDF readers that enforce permission flags will block text selection and copying. However, this restriction is enforced at the reader level, not the encryption level. The text data remains in the document structure and a reader that ignores permission flags can still extract it. The most reliable way to prevent text extraction is to redact the content permanently before adding password protection.
If you forget the user password, the document content is inaccessible. The encryption key is derived from the password, and without it the content cannot be decoded. There is no recovery mechanism built into the PDF standard. This is why it is important to store the password securely before distributing a protected file. The original unprotected file on your device is never modified by this tool, so you can re-protect it with a new password if needed.
Yes, if you know the current password. PDFDeal's remove password protection tool accepts the encrypted file and the existing password, decrypts the document, and returns an unprotected copy. You must supply the correct password to complete the process. Without it, the encrypted content cannot be accessed or decrypted.
Yes. PDFDeal's protect tool runs entirely in your browser. The file is loaded into browser memory and encrypted locally. Neither the original file nor the password is transmitted to any server at any point during the operation. The encrypted output is generated on your device and downloaded directly.
Yes. PDF password protection is part of the PDF standard and is supported by all major PDF readers on desktop and mobile, including Adobe Acrobat Reader, Apple Preview, Google Chrome's built-in PDF viewer, and PDF readers on Android and iOS. The recipient will be prompted to enter the password when they attempt to open the file, regardless of their device or operating system.
Password protection encrypts the document and restricts access to those who know the password. The underlying content is preserved intact inside the encrypted file. Redaction permanently removes specific content from the document structure, so that data no longer exists in the file at all. They address different risks: password protection controls who can open the file, while redaction eliminates specific sensitive data regardless of who accesses it. For the strongest result, redact sensitive content first, then apply password protection.
Minimally. Encrypting a PDF adds a small amount of overhead for the encryption metadata and permission flags stored in the document structure, but this is typically only a few kilobytes. The page content itself is encrypted in place, not re-encoded, so the overall file size remains essentially the same as the original.